295 matches found
About the security content of macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave
About the security content of macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave This document describes the security content of macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave. About Apple security updates F...
Google Android Buffer Overflow Vulnerability (CNVD-2020-54303)
Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in Android version 11, which stems from a read out-of-bounds vulnerability due to a lack of boundary checking in Bluetooth, and can be exploited by an...
PT-2020-17602
Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions prior to the fixed version Qualcomm Snapdragon Compute versions prior to the fixed version Qualcomm Snapdragon Consumer IOT versions prior to the fixed version Qualcomm Snapdragon Industrial IOT versions prior...
PT-2020-3286
Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.44 Oracle VM VirtualBox versions prior to 6.0.24 Oracle VM VirtualBox versions prior to 6.1.12 Description The issue is related to a buffer read out-of-bounds vulnerability in the Core component of...
Treck TCP/IP Stack Input Validation Error Vulnerability
Treck TCP/IP is a suite of TCP Transmission Control Protocol/IP Internet Interconnection Protocol from Treck, Inc. dedicated to embedded systems. An input validation error vulnerability exists in the Treck TCP/IP stack. The vulnerability originates from a network system or product that does not...
CVE-2019-14238: Improper Authentication
On STMicroelectronics STM32F7 devices, Proprietary Code Read Out Protection PCROP a software IP protection method can be defeated with a debug probe via the Instruction Tightly Coupled Memory ITCM bus...
CVE-2019-14236
On STMicroelectronics STM32L0, STM32L1, STM32L4, STM32F4, STM32F7, and STM32H7 devices, Proprietary Code Read Out Protection PCROP a software IP protection method can be defeated by observing CPU registers and the effect of code/instruction execution...
Code injection
On STMicroelectronics STM32L0, STM32L1, STM32L4, STM32F4, STM32F7, and STM32H7 devices, Proprietary Code Read Out Protection PCROP a software IP protection method can be defeated by observing CPU registers and the effect of code/instruction execution...
CVE-2019-11774: Time-of-check Time-of-use (TOCTOU) Race Condition
Prior to 0.1, all builds of Eclipse OMR contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the...
curl security and bug fix update
7.29.0-54.0.1 - Security Fixes OraBug: 28939992 - CVE-2016-8615 cookie injection for other servers https://curl.haxx.se/docs/CVE-2016-8615.html - CVE-2016-8616 case insensitive password comparison https://curl.haxx.se/docs/CVE-2016-8616.html - CVE-2016-8617 OOB write via unchecked multiplication...
CVE-2019-11775
All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the...
CVE-2019-11775: Time-of-check Time-of-use (TOCTOU) Race Condition
All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of that field in the...
WS-2019-0611
PHP versions before 7.3.23 may attempt to read values outside of allocated buffer when raising exception inside the valid generator method while using a “yield from” statement...
Oracle Linux 6 / 7 : curl (ELSA-2019-4652)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4652 advisory. - CVE-2016-8615 cookie injection for other servers https://curl.haxx.se/docs/CVE-2016-8615.html - CVE-2016-8616 case insensitive password compariso...
Google Chrome Omnibox Read Out-of-Bounds Vulnerability
Google Chrome is a web browser from Google, Inc. and Omnibox is a real-time search engine. A security vulnerability exists in Omnibox in versions of Google Chrome prior to 74.0.3729.108. An attacker can exploit this vulnerability by tricking users into visiting a specially crafted website with a...
CVE-2018-6071
An integer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
Memory Read Out-of-Bounds Vulnerability in TAS SG2 Software
Taian Technology Wuxi Co., Ltd. manufactures, sells and develops a range of industrial control and low voltage electrical and power distribution products, i.e. electronic and component products. A memory read out-of-bounds vulnerability exists in the SG2 software of Taian Technology. The...
Memory Out-of-Bounds Read Vulnerability in AutoThink of Beijing Holliday Group
Beijing Hollis Group is a leading automation and information technology solution provider in China. A memory out-of-bounds read vulnerability exists in AutoThink of Beijing Hollis Group, which can be exploited by attackers to cause a denial of service...
Huawei Multiple Products H323 Protocol Read Out-of-Bounds Vulnerability (CNVD-2018-08044)
AR120-S, AR1200, DP300, RSE6500, Secospace USG6300, ViewPoint 8660 are all network equipment from Huawei China. A read out-of-bounds vulnerability exists in the H323 protocol of several Huawei products, which allows an attacker to send messages containing special parameters to the affected device...