2109 matches found
cxf: OpenId Connect token service does not properly validate the clientId
Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, which can then be used to verify the signature of tokens issued by the service. Typically, the service obtains the public key from a local keystore JKS/PKCS12 by specifing the...
kernel: unprivileged users able to create RAW sockets in AF_ISDN network protocol
A vulnerability was found in the Linux kernel’s implementation of the AFISDN protocol, which does not enforce the CAPNETRAW capability. This flaw can allow unprivileged users to create a raw socket for this protocol. This could further allow the user to control the availability of an existing ISD...
CVE-2020-2801
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to...
Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: April 14, 2020
None None...
Description of the security update for Microsoft Dynamics NAV 2015: April 14, 2020
Description of the security update for Microsoft Dynamics NAV 2015: April 14, 2020 An information disclosure vulnerability exists if Microsoft Dynamics Business Central/NAV on-premises does not correctly hide the value of a masked field when it displays the records as a chart page. To learn more...
Description of the security update for Microsoft Dynamics NAV 2013 R2: April 14, 2020
Description of the security update for Microsoft Dynamics NAV 2013 R2: April 14, 2020 This update addresses a vulnerability that is related to the NAVRecordState state. To learn more about the vulnerability, go to CVE-2020-1022. How to obtain and install the update Microsoft Download Center The...
Update to support RDP restricted administration for Windows 8 and Windows Server 2012
Update to support RDP restricted administration for Windows 8 and Windows Server 2012 About this update This Remote Desktop Protocol RDP update lets users use Remote Desktop Connection without sending their credentials to the remote computer. This helps prevent credential and credential hash thef...
Update Rollup 1.1 for Windows MultiPoint Server 2011
Update Rollup 1.1 for Windows MultiPoint Server 2011 Summary Update Rollup 1.1 for Windows MultiPoint Server 2011 resolves issues that were found in MultiPoint Server 2011 after the software was released. This update rollup is highly recommended for all MultiPoint Server 2011 customers...
May 2016 update rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1
May 2016 update rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1 The May 2016 update rollup package for Windows 7 Service Pack 1 SP1 and Windows Server 2008 R2 SP1 resolves issues and includes performance and reliability improvements. We recommend that you apply this update rollup as part ...
Security feature bypass
An issue was discovered on Samsung mobile devices with M6.x and N7.x software. An attacker can bypass the password requirement for tablet user switching by folding the magnetic cover. The Samsung ID is SVE-2017-10602 December 2017...
CVE-2020-3916
An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, watchOS 6.2. Setting an alternate app icon may disclose a photo without needing permission to access photos...
Command injection
An issue was discovered in LINBIT csync2 through 2.0. csyncdaemonsession in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL...
PT-2020-2103
Name of the Vulnerable Software and Affected Versions Mozilla Bleach versions prior to 3.12 Description A mutation XSS issue affects users calling bleach.clean with specific settings, including whitelisting svg or math tags, allowing RCDATA tags, and setting the strip keyword argument to False...
kernel: Count overflow in FUSE request leading to use-after-free issues.
A flaw was found in the Linux kernel's implementation of the FUSE filesystem, where it allows a page reference counter overflow. If a page reference counter overflows into a negative value, it can be placed back into the "free" list for reuse by other applications. This flaw allows a local attack...
kernel: Count overflow in FUSE request leading to use-after-free issues.
A flaw was found in the Linux kernel's implementation of the FUSE filesystem, where it allows a page reference counter overflow. If a page reference counter overflows into a negative value, it can be placed back into the "free" list for reuse by other applications. This flaw allows a local attack...
Microsoft Windows Connected User Experiences and Telemetry Service Privilege Vulnerability
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system.Connected User Experiences and Telemetry Service is one of the components that can...
Description of the security update for Microsoft Dynamics NAV 2015: March 10, 2020
None None...
Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: March 10, 2020
None None...
Description of Office 2010 Service Pack 2
Description of Office 2010 Service Pack 2 Introduction Microsoft Office 2010 Service Pack 2 SP2 provides the latest updates for Office 2010. This service pack includes two kinds of fixes: Previously unreleased fixes that are included in this service pack. In addition to general product fixes, the...
Moxa MB3xxx Series Protocol Gateways
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Moxa Equipment: MB3170 series, MB3180 series, MB3270 series, MB3280 series, MB3480 series, and MB3660 series Vulnerabilities: Stack-based Buffer Overflow, Integer Overflow to Buffer Overflow,...