CVE-2020-5801: Improper Handling of Exceptional Conditions

An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that triggers an unhandled exception in CFTLDManager::HandleRequest function in RnaDaSvr.dll, resulting in process termination. Observed in FactoryTalk Linx 6.11. All versions of FactoryTalk Linx are affect...

The vulnerability of the Junos operating system’s kernel allows a attacker to trigger an emergency shutdown of the application.

The vulnerability of the Junos operating system’s kernel is related to the improper release of memory before deleting the last reference. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause an unexpected termination of the application...

Security update for openssh (moderate)

openSUSE Security Update: Security update for openssh Announcement ID: openSUSE-SU-2020:2298-1 Rating: moderate References: 1115550 1139398 1142000 1148566 1173513 1174162 Cross-References: CVE-2020-14145 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has 5 fixe...

SUSE SLED15 / SLES15 Security Update : openssh (SUSE-SU-2020:3866-1)

This update for openssh fixes the following issues : CVE-2020-14145: Fixed a potential information leak during host key exchange bsc1173513. Supplement libgtk-3-0 instead of libX11-6 to avoid installation on a textmode install bsc1142000 Fixed an issue where oracle cluster with cluvfy using 'scp'...

Collaborative innovation on display in Microsoft’s insider risk management strategy

The disrupted work environment, in which enterprises were forced to find new ways to enable their workforce to work remotely, changed the landscape for operations as well as security. One of the top areas of concern is managing insider risks, a complex undertaking even before the pandemic, and ev...

SUSE-SU-2020:3866-1 Security update for openssh

This update for openssh fixes the following issues: - CVE-2020-14145: Fixed a potential information leak during host key exchange bsc1173513. - Supplement libgtk-3-0 instead of libX11-6 to avoid installation on a textmode install bsc1142000 - Fixed an issue where oracle cluster with cluvfy using...

Apple macOS 缓冲区错误漏洞

Apple macOS is a specialized operating system developed by Apple for Mac computers. A buffer overflow vulnerability exists in Apple macOS, which can be exploited by an attacker to cause an unexpected system termination or corruption of kernel memory...

PT-2020-16864

Name of the Vulnerable Software and Affected Versions macOS versions prior to Big Sur 11.1 Security Update 2020-001 Catalina Security Update 2020-007 Mojave Description An out-of-bounds read issue existed, leading to the disclosure of kernel memory. This issue was addressed with improved input...

CVE-2020-25107

An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. There is no check on whether a domain name has '\0' termination. This may lead to successful Denial-of-Service, and possibly Remote Code Execution...

CVE-2020-24383

An issue was discovered in FNET through 4.6.4. The code for processing resource records in mDNS queries doesn't check for proper '\0' termination of the resource record name string, leading to an out-of-bounds read, and potentially causing information leak or Denial-or-Service...

CVE-2020-17440

An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets does not validate that domain names present in the DNS responses have '\0' termination. This results in errors when calculating the offset of the pointer that jumps over domain...

SUSE SLED15 / SLES15 Security Update : mutt (SUSE-SU-2020:3568-1)

This update for mutt fixes the following issues : CVE-2020-28896: incomplete connection termination could lead to sending credentials over unencrypted connections bsc1179035 Avoid that message with a million tiny parts can freeze MUA for several minutes bsc1179113 Note that Tenable Network Securi...

SUSE SLES12 Security Update : mutt (SUSE-SU-2020:3632-1)

This update for mutt fixes the following issues : Find and display the content of messages properly. bsc1179461 CVE-2020-28896: incomplete connection termination could send credentials over unencrypted connections. bsc1179035 Avoid that message with a million tiny parts can freeze MUA for several...

CVE-2020-27906

Multiple integer overflows were addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A remote attacker may be able to cause unexpected application termination or heap corruption...

CVE-2020-27906

Multiple integer overflows were addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A remote attacker may be able to cause unexpected application termination or heap corruption...

Integer overflow

Multiple integer overflows were addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A remote attacker may be able to cause unexpected application termination or heap corruption...

Integer overflow

An integer overflow was addressed through improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. A remote attacker may be able to cause unexpected application termination or...

CVE-2020-10011

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 14.2 and iPadOS 14.2, macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave. Processing a maliciously crafted USD file may lead to unexpected application terminati...

Cross site scripting

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 14.2 and iPadOS 14.2, macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave. Processing a maliciously crafted USD file may lead to unexpected application terminati...

CVE-2020-27911

CVE-2020-27911 is a libxml2-related issue addressed by an integer overflow fix via improved input validation. Publicly documented impact indicates potential remote code execution or application termination, but exploitation status is not detailed in the provided materials. Affected platforms incl...