Foxit Studio Photo Buffer Overflow Vulnerability (CNVD-2020-65179)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A buffer overflow vulnerability exists in the processing of PNG files in Foxit Studio Photo 3.6.6.924 and earlier versions for Windows platforms, which stems from the program not properly validating...

AZL-79080 CVE-2020-14039 affecting package golang 1.25.7-1

In Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the VerifyOptions.KeyUsages EKU requirements if VerifyOptions.Roots equals nil and the installation is on Windows. Thus, X.509 certificate verification is incomplete...

Adobe Download Manager Injection Vulnerability

Adobe Download Manager is an application for managing and downloading Adobe products from Adobe USA. An injection vulnerability exists in version 2.0.0.518 of Adobe Download Manager for Windows-based platforms. An attacker can exploit this vulnerability to execute arbitrary code...

Mozilla Firefox Code Problem Vulnerability (CNVD-2020-46339)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in previous versions of Mozilla Firefox 78 for Windows-based platforms. The vulnerability can be exploited by an attacker to execute arbitrary code via a malicious DLL...

Unspecified Vulnerability in IBM DB2

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A security vulnerability exists in IBM DB2. An attacker can exploit the vulnerability to cause a denia...

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from insufficient validation of input data. This allows a malicious actor to trigger a service failure.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Unspecified Vulnerability in NVIDIA Windows GPU Display Driver (CNVD-2021-27725)

NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA dedicated to the Windows platform. A security vulnerability in the Inter Process Communication APIs in the NVIDIA Windows GPU Display Driver all versions can be exploited by a local attacker to execute...

Cisco Webex Network Recording Player and Cisco Webex Player Input Validation Error Vulnerability (CNVD-2020-31990)

Cisco Webex Network Recording Player is a player for playing video conference recordings from Cisco USA. An input validation error vulnerability exists in Cisco Webex Network Recording Player and Cisco Webex Player Release prior to 3.0 MR3 Security Patch 2 and prior to 4.0 MR3 for Windows-based...

Cisco Webex Network Recording Player and Cisco Webex Player Input Validation Error Vulnerability (CNVD-2020-31968)

Cisco Webex Network Recording Player is a player for playing video conference recordings from Cisco USA. An input validation error vulnerability exists in Cisco Webex Network Recording Player and Cisco Webex Player for Windows-based platforms. An attacker can send a malicious ARF or WRF file via ...

Mozilla Firefox and Firefox ESR Input Validation Error Vulnerability (CNVD-2020-34653)

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox ESR versions prior to 68.8 an...

CVE-2020-12772

An issue was discovered in Ignite Realtime Spark 2.8.3 and the ROAR plugin for it on Windows. A chat message can include an IMG element with a SRC attribute referencing an external host's IP address. Upon access to this external host, the NTLM hashes of the user are sent with the HTTP request. Th...

CVE-2020-6243

Under certain conditions, SAP Adaptive Server Enterprise XP Server on Windows Platform, versions 15.7, 16.0, does not perform the necessary checks for an authenticated user while executing the extended stored procedure, allowing an attacker to read, modify, delete restricted data on connected...

CVE-2020-6243

Under certain conditions, SAP Adaptive Server Enterprise XP Server on Windows Platform, versions 15.7, 16.0, does not perform the necessary checks for an authenticated user while executing the extended stored procedure, allowing an attacker to read, modify, delete restricted data on connected...

CVE-2020-6243

The CVE-2020-6243 entry affects SAP Adaptive Server Enterprise (XP Server on Windows), specifically versions 15.7 and 16.0. The root cause is that the extended stored procedure execution may not perform necessary checks for an authenticated user, allowing an attacker to read, modify, or delete re...

McAfee Active Response Privilege Vulnerability (CNVD-2020-35073)

McAfee Active Response MAR is an endpoint detection and response tool for security threats from the U.S.-based McAfee. The product supports features such as rapid access to threat data, threat alerts and centralized management. A power lifting vulnerability exists in versions prior to McAfee MAR...

CVE-2020-7803

IMGTech Co,Ltd ZInsX.ocx ActiveX Control in Zoneplayer 2.0.1.3, version 2.0.1.4 and prior versions on Windows. File Donwload vulnerability in ZInsX.ocx of IMGTech Co,Ltd Zoneplayer allows attacker to cause arbitrary code execution...

Kentico CMS 12.0.14 Remote Command Execution Exploit

This Metasploit module exploits a vulnerability in the Kentico CMS platform versions 12.0.14 and earlier. Remote command execution is possible via unauthenticated XML requests to the Staging Service SyncServer.asmx interface ProcessSynchronizationTaskData method stagingTaskData parameter. XML inp...

Zoom IT installer unauthorized operation vulnerability

Zoom IT is a screen zoom and annotation tool for technical presentations from Zoom USA. A security vulnerability exists in versions of Zoom IT installer ZoomInstallerFull.msi prior to 4.6.10 for Windows-based platforms. An attacker can exploit the vulnerability to delete restricted files...

Foxit Reader and PhantomPDF Type Obfuscation Remote Code Execution Vulnerability (CNVD-2020-24443)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in the handling of the Export command in Foxit Reader and Foxit PhantomPDF 9.7.1.29511 and earlier versions for Windows platforms, which stems from the program's failure t...

Foxit PhantomPDF U3DBrowser U3D file parsing out-of-bounds write remote code execution vulnerability (CNVD-2020-24449)

Foxit PhantomPDF is China's Foxit Foxit a PDF document reader.Foxit 3D Plugin is China's Foxit Foxit a use in the PDF document reader in the 3D plug-in. A security vulnerability exists in Foxit PhantomPDF for Windows platforms when handling U3D objects embedded in PDFs, which stems from the progr...