CVE-2020-11650

An issue was discovered in iXsystems FreeNAS and TrueNAS 11.2 before 11.2-u8 and 11.3 before 11.3-U1. It allows a denial of service. The login authentication component has no limits on the length of an authentication message or the rate at which such messages are sent...

Security Bulletin: IBM InfoSphere Metadata Asset Manager is affected by a Stored cross site scripting vulnerability

Summary A Stored cross site scripting vulnerability was addressed by IBM InfoSphere Metadata Asset Manager. Vulnerability Details CVEID: CVE-2019-4618 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScrip...

Cisco Data Center Network Manager Cross-Site Scripting Vulnerability (CNVD-2020-13203)

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. A stored cross-site scripting vulnerability exists in the Web management interface...

Heap overflow

In FreeBSD 12.1-STABLE before r357213, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r357214, and 11.3-RELEASE before 11.3-RELEASE-p6, URL handling in libfetch with URLs containing username and/or password components is vulnerable to a heap buffer...

Code injection

In FreeBSD 12.1-STABLE before r354734, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r354735, and 11.3-RELEASE before 11.3-RELEASE-p6, due to incorrect initialization of a stack data structure, core dump files may contain up to 20 bytes of kernel da...

CVE-2019-15875

Removed by vendor...

CVE-2020-7450

In FreeBSD 12.1-STABLE before r357213, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r357214, and 11.3-RELEASE before 11.3-RELEASE-p6, URL handling in libfetch with URLs containing username and/or password components is vulnerable to a heap buffer...

Security Bulletin: IBM InfoSphere Subscription Manager is affected by an Information Disclosure vulnerability CVE-2019-4628

Summary An Information Disclosure vulnerability was addressed by IBM InfoSphere Subscription Manager. Vulnerability Details CVEID: CVE-2019-4628 DESCRIPTION: IBM InfoSphere Information Server could allow a remote attacker to obtain sensitive information due to incomplete filtering of user input...

Security Bulletin: IBM InfoSphere Subscription Manager is affected by an Input validation vulnerability CVE-2019-4627

Summary An Input validation vulnerability was addressed by IBM InfoSphere Subscription Manager. Vulnerability Details CVEID: CVE-2019-4627 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in th...

CVE-2020-6833

An issue was discovered in GitLab EE 11.3 and later. A GitLab Workhorse bypass could lead to package and file disclosure via request smuggling...

CVE-2020-6833

An issue was discovered in GitLab EE 11.3 and later. A GitLab Workhorse bypass could lead to package and file disclosure via request smuggling...

CVE-2020-6833

Removed by vendor...

CVE-2020-6833

An issue was discovered in GitLab EE 11.3 and later. A GitLab Workhorse bypass could lead to package and file disclosure via request smuggling...

CVE-2020-6833

GitLab EE 11.3 and later is affected by a GitLab Workhorse bypass that could lead to package and file disclosure via request smuggling. The issue is documented across multiple sources (OSV, NVD, CNVD, etc.) with the same core description. The connected documents do not provide a published fix or ...

About the security content of Xcode 11.3 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

Security Bulletin: IBM InfoSphere Information Server is vulnerable to Cross-site request forgery (CVE-2019-4407 CVE-2019-4757)

Summary A Cross-site request forgery vulnerability was addressed by IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2019-4407 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and...

Security Bulletin: IBM InfoSphere Information Server is vulnerable to MIME type attacks

Summary A vulnerability that allows MIME type attacks was addressed by IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2019-4714 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript...

Cisco IP Phone 6800, 7800 and 8800 Series Cross-Site Scripting Vulnerability

The Cisco IP Phone 6800, 7800, and 8800 Series are all IP phone families. A cross-site scripting vulnerability exists in the web-based GUI in the Cisco IP Phone 6800, 7800, and 8800 Series using Multiplatform Firmware Release prior to 11.31, which stems from the GUI failing to adequately validate...

GitLab path traversal vulnerability (CNVD-2020-01911)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A path traversal vulnerability exists in Gitlab Enterpris...

GitLab EE Insecure Direct Object Reference Vulnerability

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. GitLab EE 11.3 - 12.5 suffers from an insecure direct object...