undertow: AJP File Read/Inclusion Vulnerability

A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instances...

PT-2020-4047 · Intel · Intel Ism +1

Name of the Vulnerable Software and Affected Versions: IntelR AMT and IntelR ISM versions before 14.0.33 Description: The issue is related to an out-of-bounds read in the IPv6 subsystem, which may allow an unauthenticated user to potentially enable denial of service via network access. This can b...

KLA12097 OSI vulnerability in VMware Workstation and Player

Out of bounds read vulnerability vulnerability was found in VMware Workstation and Player. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories VMSA-2020-0012 Related products VMware-Workstation VMware-Player CVE list CVE-2020-3960 unknown Solution...

SUSE-SU-2020:1553-1 Security update for libexif

This update for libexif to 0.6.22 fixes the following issues: Security issues fixed: - CVE-2016-6328: Fixed an integer overflow in parsing MNOTE entry data of the input file bsc1055857. - CVE-2017-7544: Fixed an out-of-bounds heap read vulnerability in exifdatasavedataentry function in...

Google Android Media Framework Out-of-Bounds Read Vulnerability (CNVD-2020-46322)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. A security vulnerability exists in Media Framework in Android version 10. The vulnerability can be exploited by an...

GHSA-4VJ3-F849-5R48 Arbitrary File Read in Snyk Broker

All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network by creating symlinks to match whitelisted paths...

PT-2020-15091 · Huawei · Huawei Products +1

Name of the Vulnerable Software and Affected Versions: Huawei products affected versions not specified Description: There are multiple out of bounds OOB read vulnerabilities in the implementation of the Common Open Policy Service COPS protocol of some Huawei products. The specific decoding functi...

KLA11790 Multiple vulnerabilities in Apple iCloud

Multiple vulnerabilities were found in Apple iCloud. Malicious users can exploit these vulnerabilities to perform cross-site scripting attack, execute arbitrary code, obtain sensitive information, cause denial of service. Below is a complete list of vulnerabilities: 1. A logic vulnerability in...

CVE-2020-13396

An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds OOB read vulnerability has been detected in ntlmreadChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlmmessage.c...

SUSE SLED15 / SLES15 Security Update : libbsd (SUSE-SU-2020:1298-1)

This update for libbsd fixes the following issues : CVE-2019-20367: Fixed an out-of-bounds read during a comparison for a symbol names from the string table bsc1160551. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenab...

DEBIAN-CVE-2020-11522

libfreerdp/gdi/gdi.c in FreeRDP 1.0 through 2.0.0-rc4 has an Out-of-bounds Read...

CVE-2020-1808

Honor 20;HONOR 20 PRO;Honor Magic2;HUAWEI Mate 20 X;HUAWEI P30;HUAWEI P30 Pro;Honor View 20 smartphones with versions earlier than 10.0.0.187C00E60R4P11; versions earlier than 10.0.0.187C00E60R4P11; versions earlier than 10.0.0.176C00E60R2P11;9.1.0.135C00E133R2P1; versions earlier than...

CVE-2020-1808

The CVE-2020-1808 issue is an Out-of-Bounds Read vulnerability affecting Huawei/Honor smartphones (e.g., Honor 20, HONOR 20 PRO, Honor Magic2, Huawei Mate 20 X, P30, P30 Pro, Honor View 20, and related versions). The flaw allows reading data past the end of an allocated buffer when a user install...

CVE-2020-11526

libfreerdp/core/update.c in FreeRDP versions 1.1 through 2.0.0-rc4 has an Out-of-bounds Read...

Multiple Huawei products cross-border read vulnerability (CNVD-2020-28976)

The Huawei Honor Magic 2, among others, is a smartphone from the Chinese company Huawei Huawei. A security vulnerability exists in several Huawei products. Attackers can exploit the vulnerability with the help of a specially crafted application to cause information leakage or service anomalies...

Debian DLA-2210-1 : apt security update

When normalizing ar member names by removing trailing whitespace and slashes, an out-out-bound read can be caused if the ar member name consists only of such characters, because the code did not stop at 0, but would wrap around and continue reading from the stack, without any limit. For Debian 8...

GitLab: Use of Ruby Forwardable module and runtime meta-programming may introduce vulnerabilities

I was digging through the gitlab-foss repository and noticed an interested pattern that seems to be adopted in a few places: the use of Forwardable with meta-programming over delegators, explicit attrreader methods or methodmissing. Heads up: the arbitrary file read vulnerability I demonstrate in...

Adobe Acrobat < 2015.006.30523 / 2017.011.30171 / 2020.009.20063 Multiple Vulnerabilities (APSB20-24)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30523, 2017.011.30171, or 2020.009.20063. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier,...

DEBIAN-CVE-2020-11042

In FreeRDP greater than 1.1 and before 2.0.0, there is an out-of-bounds read in updatereadiconinfo. It allows reading a attacker-defined amount of client memory 32bit unsigned - 4GB to an intermediate buffer. This can be used to crash the client or store information for later retrieval. This has...

Huawei EulerOS: Security Advisory for glib2 (EulerOS-SA-2020-1520)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...