Archive
22 June 2020
Vulnerabilities first published on this day (UTC), newest first.
80 results · Feed
-
Unscored —
WebFOCUS Business Intelligence 8.0 (SP6) allows a Cross-Site Request Forgery (CSRF) attack against administrative users…
-
Unscored —CVE-2020-14461 Public exploit
Zyxel Armor X1 WAP6806 1.00(ABAL.6)C0 devices allow Directory Traversal via the images/eaZy/ URI.
-
Unscored —
app/Model/Attribute.php in MISP 2.4.127 lacks an ACL lookup on attribute correlations. This occurs when querying the at…
-
High 7.5
ECDSA signature validation vulnerability by accepting wrong ASN.1 encoding in jsrsasign
An issue was discovered in the jsrsasign package through 8.0.18 for Node.js. It allows a malleability in ECDSA signatures by not checking overflows in the length of a sequence and '0' characters appended or prepended to an integer. The modified signatures are…
-
Critical 9.8
RSA-PSS signature validation vulnerability by prepending zeros in jsrsasign
An issue was discovered in the jsrsasign package before 8.0.17 for Node.js. Its RSASSA-PSS (RSA-PSS) implementation does not detect signature manipulation/modification by prepending '\0' bytes to a signature (it accepts these modified signatures as valid). An…
-
Critical 9.8
RSA PKCS#1 decryption vulnerability with prepending zeros in jsrsasign
An issue was discovered in the jsrsasign package before 8.0.18 for Node.js. Its RSA PKCS1 v1.5 decryption implementation does not detect ciphertext modification by prepending '\0' bytes to ciphertexts (it decrypts modified ciphertexts without error). An attac…
-
High 8.8
Insufficient URL sanitization and validation in Safepay Browser (VA-8631)
Improper Input Validation vulnerability in the Safepay browser component of Bitdefender Total Security 2020 allows an external, specially crafted web page to run remote commands inside the Safepay Utility process. This issue affects Bitdefender Total Security…
-
Medium 5.3
Improper Access Control vulnerability in ATD
Improper Access Control vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.10.0 allows local users to view sensitive files via a carefully crafted HTTP request parameter.
-
Unscored —
Possible memory corruption in perfservice due to improper validation array length taken from user application. in Snapd…
-
Unscored —
Buffer over-write may occur during fetching track decoder specific information if cb size exceeds buffer size in Snapdr…
-
Unscored —
A possible buffer overflow would occur while processing command from firmware due to the group_id obtained from the fir…
-
Unscored —
Buffer overflow can occur while parsing eac3 header while playing the clip which is nonstandard in Snapdragon Auto, Sna…
-
Unscored —
Buffer overflow will happen while parsing mp4 clip with corrupted sample atoms values which exceeds MAX_UINT32 range du…
-
Unscored —
Use after free issue in camera applications when used randomly over multiple operations due to pointer not set to NULL …
-
Unscored —
Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto…
-
Unscored —
Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto…
-
Unscored —
Stack based overflow If the maximum number of arguments allowed per request in perflock exceeds in Snapdragon Auto, Sna…
-
Unscored —
Improper access due to socket opened by the logging application without specifying localhost address in Snapdragon Cons…
-
Unscored —
Any application can bind to it and exercise the APIs due to no protection for AIDL uimlpaservice in Snapdragon Auto, Sn…
-
Unscored —
Possible buffer overflow while copying the frame to local buffer due to lack of check of length before copying in Snapd…
-
Unscored —
Double free issue in kernel memory mapping due to lack of memory protection mechanism in Snapdragon Compute, Snapdragon…
-
Unscored —
Integer overflow in diag command handler when user inputs a large value for number of tasks field in the request packet…
-
Unscored —
System Services exports services without permission protect and can lead to information exposure in Snapdragon Industri…
-
Unscored —
Out of bound write can happen due to lack of check of array index value while parsing SDP attribute for SAR in Snapdrag…
-
Unscored —
Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdrag…
-
Unscored —
Buffer overflow occurs while processing an subsample data length out of range due to lack of user input validation in S…
-
Unscored —
Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote …
-
Unscored —
Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from netw…
-
Unscored —
While IPA driver processes route add rule IOCTL, there is no input validation of the rule ID prior to adding the rule t…
-
Unscored —
Payload size is not validated before reading memory that may cause issue of accessing invalid pointer or some garbage d…
-
Unscored —
kernel writes to user passed address without any checks can lead to arbitrary memory write in Snapdragon Auto, Snapdrag…
-
Low 3.5
Out-of-bound read in glyph_cache_put in FreeRDP
In FreeRDP before version 2.1.2, there is an out-of-bound read in glyph_cache_put. This affects all FreeRDP clients with `+glyph-cache` option enabled This is fixed in version 2.1.2.
-
Low 3.5
Global OOB read in update_recv_primary_order in FreeRDP
In FreeRDP before version 2.1.2, an out of bound reads occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1.2.
-
Low 3.5
Global OOB read in update_read_cache_bitmap_v3_order in FreeRDP
In FreeRDP before version 2.1.2, there is a global OOB read in update_read_cache_bitmap_v3_order. As a workaround, one can disable bitmap cache with -bitmap-cache (default). This is fixed in version 2.1.2.
-
Low 3.5CVE-2020-11097 Public exploit
OOB read in ntlm_av_pair_get in FreeRDP
In FreeRDP before version 2.1.2, an out of bounds read occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1.2.
-
Low 3.5
OOB Read in license_read_new_or_upgrade_license_packet in FreeRDP
In FreeRDP before version 2.1.2, there is an out of bounds read in license_read_new_or_upgrade_license_packet. A manipulated license packet can lead to out of bound reads to an internal buffer. This is fixed in version 2.1.2.
-
Low 3.1
OOB Read in RLEDECOMPRESS in FreeRDP
In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS. All FreeRDP based clients with sessions with color depth < 32 are affected. This is fixed in version 2.1.2.
-
Low 3.5
Use-After-Free in gdi_SelectObject in FreeRDP
In FreeRDP before version 2.1.2, there is a use-after-free in gdi_SelectObject. All FreeRDP clients using compatibility mode with /relax-order-checks are affected. This is fixed in version 2.1.2.
-
Low 3.1
Integer casting vulnerability in `update_recv_secondary_order` in FreeRDP
In FreeRDP before version 2.1.2, there is an integer casting vulnerability in update_recv_secondary_order. All clients with +glyph-cache /relax-order-checks are affected. This is fixed in version 2.1.2.
-
Low 3.5
OOB read in `TrioParse` in FreeRDP
In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse. Logging might bypass string length checks due to an integer overflow. This is fixed in version 2.1.2.