CWE-436 Archives - CVE Vulnerability

CVE-2018-6560

Sun, 26 Feb 2023 06:50:46 +0000

In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3, crafted D-Bus messages to the host can be used to break out of the sandbox, because whitespace handling in the proxy is not identical to whitespace handling in the daemon.

The post CVE-2018-6560 appeared first on CVE Vulnerability.

CVE-2018-19966

Sun, 26 Feb 2023 06:48:23 +0000

An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service (host OS crash) or possibly gain host OS privileges because of an interpretation conflict for a union data structure associated with shadow paging. NOTE: this issue exists because of an incorrect fix for CVE-2017-15595.

The post CVE-2018-19966 appeared first on CVE Vulnerability.

CVE-2020-9399

Sun, 26 Feb 2023 06:43:44 +0000

The Avast AV parsing engine allows virus-detection bypass via a crafted ZIP archive. This affects versions before 12 definitions 200114-0 of Antivirus Pro, Antivirus Pro Plus, and Antivirus for Linux.

The post CVE-2020-9399 appeared first on CVE Vulnerability.

CVE-2020-9363

Sun, 26 Feb 2023 06:43:43 +0000

The Sophos AV parsing engine before 2020-01-14 allows virus-detection bypass via a crafted ZIP archive. This affects Endpoint Protection, Cloud Optix, Mobile, Intercept X Endpoint, Intercept X for Server, and Secure Web Gateway. NOTE: the vendor feels that this does not apply to endpoint-protection products because the virus would be detected upon extraction.

The post CVE-2020-9363 appeared first on CVE Vulnerability.

CVE-2020-9362

Sun, 26 Feb 2023 06:43:43 +0000

The Quick Heal AV parsing engine (November 2019) allows virus-detection bypass via a crafted GPFLAG in a ZIP archive. This affects Total Security, Home Security, Total Security Multi-Device, Internet Security, Total Security for Mac, AntiVirus Pro, AntiVirus for Server, and Total Security for Android.

The post CVE-2020-9362 appeared first on CVE Vulnerability.

CVE-2020-9342

Sun, 26 Feb 2023 06:43:42 +0000

The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a GZIP archive. This affects versions before 17.0.605.474 (on Linux) of Cloud Protection For Salesforce, Email and Server Security, and Internet GateKeeper.

The post CVE-2020-9342 appeared first on CVE Vulnerability.

CVE-2020-9264

Sun, 26 Feb 2023 06:43:41 +0000

ESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Field in a ZIP archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop.

The post CVE-2020-9264 appeared first on CVE Vulnerability.

CVE-2020-3564

Sun, 26 Feb 2023 06:41:21 +0000

A vulnerability in the FTP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass FTP inspection. The vulnerability is due to ineffective flow tracking of FTP traffic. An attacker could exploit this vulnerability by sending crafted FTP traffic through an affected device. A successful exploit could allow the attacker to bypass FTP inspection and successfully complete FTP connections.

The post CVE-2020-3564 appeared first on CVE Vulnerability.

CVE-2020-3200

Sun, 26 Feb 2023 06:41:04 +0000

A vulnerability in the Secure Shell (SSH) server code of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. The vulnerability is due to an internal state not being represented correctly in the SSH state machine, which leads to an unexpected behavior. An attacker could exploit this vulnerability by creating an SSH connection to an affected device and using a specific traffic pattern that causes an error condition within that connection. A successful exploit could allow an attacker to cause the device to reload, resulting in a denial of service (DoS) condition.

The post CVE-2020-3200 appeared first on CVE Vulnerability.

CVE-2020-10193

Sun, 26 Feb 2023 06:35:44 +0000

ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop.

The post CVE-2020-10193 appeared first on CVE Vulnerability.