7000 matches found
Remote code execution
A remote code execution vulnerability in Mitel MiVoice Connect Client before 214.100.1223.0 could allow an attacker to execute arbitrary code in the chat notification window, due to improper rendering of chat messages. A successful exploit could allow an attacker to steal session cookies, perform...
Mozilla: Attacker-induced prompt for extension installation
By holding a reference to the eval function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious...
CVE-2020-12456: Improper Limitation of a Pathname to a Restricted Directory
A remote code execution vulnerability in Mitel MiVoice Connect Client before 214.100.1223.0 could allow an attacker to execute arbitrary code in the chat notification window, due to improper rendering of chat messages. A successful exploit could allow an attacker to steal session cookies, perform...
PT-2020-13121
Name of the Vulnerable Software and Affected Versions Mitel MiVoice Connect Client versions prior to 214.100.1223.0 Description A remote code execution issue exists due to improper rendering of chat messages, allowing an attacker to execute arbitrary code in the chat notification window. This cou...
Vulnerabilities fixed in the X11 server
SUSE has fixed three vulnerabilities in the x.org X11 server. A malicious party could potentially exploit the vulnerabilities to bypass security measures and gain access to system data and/or memory. -= SUSE =- SUSE has made updates available to fix the vulnerabilities in SUSE 12 and 15. fixes in...
Fly-wm Resource Initialization DoS
The vulnerability of the Fly-wm window manager is related to incorrect initialization of resources. Exploiting this vulnerability can allow attackers to cause service failures...
Fly-wm Information Disclosure
The vulnerability of the Fly-wm window manager is related to the disclosure of information when both the screen shutdown and the lock mechanism are activated at the same time. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
Exploit for Insecure Storage of Sensitive Information in Microsoft
CVE-2020-1493 This vulnerability occurs in Outlook 2019 16.0...
Xorg-server Memory Leak
The vulnerability of the X Window System Xorg-server is related to incorrect memory initialization. Exploiting this vulnerability can allow an attacker to cause a leak of part of the server’s memory for the Xorg-server client...
PT-2020-21915
Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description The issue is related to a crash type of Use-of-uninitialized-value. The crash state includes functions such as slide hash, fill window, and deflate fast. Recommendations At the moment,...
CVE-2020-17448
Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat window with a filename that lacks an extension...
CVE-2020-17448
Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat window with a filename that lacks an extension...
CVE-2020-17448
Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat window with a filename that lacks an extension...
CVE-2020-17448
Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat window with a filename that lacks an extension...
Denial Of Service (DoS)
SQLite is vulnerable to denial of service. An attacker is able to cause a denial of service segmentation fault condition via a malicious window-function query due to a mishandling during the AggInfo object's initialization...
Bypassing MassLogger Anti-Analysis — a Man-in-the-Middle Approach
The FireEye Front Line Applied Research & Expertise FLARE Team attempts to always stay on top of the most current and emerging threats. As a member of the FLARE Reverse Engineer team, I recently received a request to analyze a fairly new credential stealer identified as MassLogger. Despite the la...
DEBIAN-CVE-2020-14344
An integer overflow leading to a heap-buffer overflow was found in The X Input Method XIM client was implemented in libX11 before version 1.6.10. As per upstream this is security relevant when setuid programs call XIM client functions while running with elevated privileges. No such programs are...
fly-wm Data Compromise
The vulnerability of the fly-wm window manager is related to incorrect data initialization. Exploiting this vulnerability can allow attackers to compromise data integrity...
openSUSE Security Update : claws-mail (openSUSE-2020-1139)
This update for claws-mail fixes the following issues : - Update to 3.17.6 : - It is now possible to 'Inherit Folder properties and processing rules from parent folder' when creating new folders with the move message and copy message dialogues. - A Phishing warning is now shown when copying a...
PT-2020-22875
Уязвимость менеджера окон fly-wm связана с неправильным освобождением памяти после переноса иконки в новое место. Эксплуатация уязвимости может позволить нарушителю получить доступ к конфиденциальным данным...