2024-12-23 | CARIBSOC

Posted 2020-12-09

CVE-2020-16599 (binutils)

A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.34, in _bfd_elf_get_symbol_version_string, as [...]

By SOC Team

In Guidance

Posted 2020-12-09

Patch Tuesday – 12.2020

By SOC Team

In Adobe

Posted 2020-12-08

Upcoming Security Updates for Adobe Acrobat and Reader (APSB20-75)

A prenotification security advisory (APSB20-75) has been posted regarding upcoming Adobe Acrobat and Reader updates scheduled for the week of December 07, 2020. We will continue to provide [...]

By SOC Team

In Briefing

Posted 2020-12-05

The Briefing – WK49 2020

By SOC Team

In CVE

Posted 2020-12-02

CVE-2017-2910 (libxls)

An exploitable Out-of-bounds Write vulnerability exists in the xls_addCell function of libxls 2.0. A specially crafted xls file can cause a memory corruption resulting in remote code execution. [...]

By SOC Team

In CVE

Posted 2020-12-02

CVE-2020-13956 (active_iq_unified_manager, communications_cloud_native_core_service_communication_proxy, data_integrator, httpclient, jd_edwards_enterpriseone_orchestrator, jd_edwards_enterpriseone_tools, nosql_database, peoplesoft_enterprise_peopletools, peoplesoft_enterprise_pt_peopletools, primavera_unifier, quarkus, retail_customer_management_and_segmentation_foundation, snapcenter, spatial_studio, sql_developer, weblogic_server)

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target [...]