Information or messages are not updated automatically in an application in Windows 7 or Windows Server 2008 R2

Information or messages are not updated automatically in an application in Windows 7 or Windows Server 2008 R2 Symptoms This issue occurs when several windows are displayed in multiple applications at the same time in Windows 7 Service Pack 1 SP1 or Windows Server 2008 R2 SP1. Cause This issue...

System malfunction because memory leak occurs in dwm.exe in Windows 7 or Windows Server 2008 R2

System malfunction because memory leak occurs in dwm.exe in Windows 7 or Windows Server 2008 R2 This article describes an issue in which a memory leak occurs in Desktop Window Manager dwm.exe in Windows 7 Service Pack 1 SP1 or Windows Server 2008 R2 SP1. An update is available to resolve this...

CVE-2020-11655: Improper Initialization

SQLite through 3.31.1 allows attackers to cause a denial of service segmentation fault via a malformed window-function query because the AggInfo object's initialization is mishandled...

qt security update

CentOS Errata and Security Advisory CESA-2020:1172 An update for qt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

[ASA-202004-9] chromium: multiple issues

Arch Linux Security Advisory ASA-202004-9 ========================================= Severity: High Date : 2020-04-08 CVE-ID : CVE-2020-6423 CVE-2020-6430 CVE-2020-6431 CVE-2020-6432 CVE-2020-6433 CVE-2020-6434 CVE-2020-6435 CVE-2020-6436 CVE-2020-6437 CVE-2020-6438 CVE-2020-6439 CVE-2020-6440...

Mozilla Firefox < 75.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 75.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-12 advisory. - Mozilla developers Tyson Smith, Bob Clary, and Alexandru Michis reported memory safety bugs present in Firefo...

PT-2020-3393

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 81.0.4044.92 Description The issue is related to a use after free in window management, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to unauthorized...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: This updates includes 32 security fixes, including: 1019161 High CVE-2020-6454: Use after free in extensions. Reported by Leecraso and Guang Gong of Alpha Lab, Qihoo 360 on 2019-10-29 1043446 High CVE-2020-6423: Use after free in audio. Reported by Anonymous on...

Memory Leaks

ImageMagick is vulnerable to memory leaks. It is possible because an image display and manipulation tool for the X Window System can read and write multiple image formats...

Moderate: Red Hat Security Advisory: qt security update

An update for qt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

FreeCommander XE 2020 Pathname Buffer Overflow Exploit

!/usr/bin/python Exploit Title: FreeCommander XE 2020 - Pathname Buffer Overflow SEH Version: Build 810a 32-bit Software Link: https://freecommander.com/downloads/FreeCommanderXE-32-publicsetup.zip Exploit Author: Hodorsec email protected / email protected Vendor Homepage:...

HTTP/2: request for large response leads to denial of service

A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server's...

CVE-2020-6810

After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification that indicates the browser is in fullscreen mode. Combined with spoofing the browser chrome, this could have led to confusing the user about the current origin of the page and...

CVE-2020-6810

After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification that indicates the browser is in fullscreen mode. Combined with spoofing the browser chrome, this could have led to confusing the user about the current origin of the page and...

CVE-2019-20618

An issue was discovered on Samsung mobile devices with P9.0 software. The Pin Window feature allows unauthenticated unpinning of an app. The Samsung ID is SVE-2018-13765 March 2019...

CVE-2019-20618

An issue was discovered on Samsung mobile devices with P9.0 software. The Pin Window feature allows unauthenticated unpinning of an app. The Samsung ID is SVE-2018-13765 March 2019...

Code injection

An issue was discovered on Samsung mobile devices with P9.0 software. The Pin Window feature allows unauthenticated unpinning of an app. The Samsung ID is SVE-2018-13765 March 2019...

CVE-2019-20618

An issue was discovered on Samsung mobile devices with P9.0 software. The Pin Window feature allows unauthenticated unpinning of an app. The Samsung ID is SVE-2018-13765 March 2019...

CVE-2019-20618

The vulnerability CVE-2019-20618 affects Samsung mobile devices on Android P (9.0) where the Pin Window feature allows unauthenticated unpinning of an app. The connected Red Hat/EUVD/CNVD/etc. records mirror the same description and confirm the issue stems from Pin Window behavior; no explicit ro...

PT-2020-10594

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with P9.0 software Description An issue was discovered that allows unauthenticated unpinning of an app through the Pin Window feature. Recommendations For Samsung mobile devices with P9.0 software, at the moment, there i...