Archive
11 November 2020
Vulnerabilities first published on this day (UTC), newest first.
5 results · Clear filters · Feed
-
Low 3.5
Information exposure in touchbase.ai
toucbase.ai before version 2.0 leaks information by not stripping exif data from images. Anyone with access to the uploaded image of other users could obtain its geolocation, device, and software version data etc (if present. The issue is fixed in version 2.0.
-
Low 2.4
In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration chan…
-
Low 3.3
Microsoft Word Security Feature Bypass Vulnerability
Microsoft Word Security Feature Bypass Vulnerability
-
Low 2.8
accountsservice .pam_environment infinite loop
An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, would perform unbounded read operations on user-controlled ~/.pam_environment files, allowing an infinite loop if /dev/zero is symlinked to…
-
Low 3.3CVE-2020-16126 Public exploit
accountsservice drops ruid, allows unprivileged users to send it signals
An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, improperly dropped the ruid, allowing untrusted users to send signals to AccountService, thus stopping it from handling D-Bus messages in a…