902 matches found
CVE-2020-7453
Removed by vendor...
CVE-2019-15877
In FreeBSD 12.1-STABLE before r356606 and 12.1-RELEASE before 12.1-RELEASE-p3, driver specific ioctl command handlers in the ixl network driver failed to check whether the caller has sufficient privileges allowing unprivileged users to trigger updates to the device's non-volatile memory...
CVE-2019-15877
CVE-2019-15877 affects FreeBSD ixl(4): driver-specific ioctl handlers fail to verify privileges, allowing unprivileged users to trigger updates to the device’s non-volatile memory in FreeBSD 12.1-STABLE before r356606 and 12.1-RELEASE before 12.1-RELEASE-p3. The FreeBSD security advisory SA-20:06...
Oracle Application Testing Suite (Apr 2020 CPU)
The version of Oracle Application Testing Suite installed on the remote host is affected by a Server Side Request Forgery SSRF vulnerability in the Oracle FLEXCUBE Private Banking product of Oracle Financial Services Applications component: Core Apache Axis. The supported versions which are...
SolarWinds Dameware Buffer Overflow Vulnerability
SolarWinds Dameware is a remote access and system management solution from SolarWinds USA. The product supports multi-factor authentication, network management and other features. A buffer overflow vulnerability exists in SolarWinds Dameware version 12.1 Hotfix 3. A remote attacker can exploit th...
CVE-2019-7292
A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may result in the disclosure of process memory...
GitLab Cross-Site Scripting Vulnerability (CNVD-2020-19605)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A cross-site scripting vulnerability exists in GitLab...
GitLab Cross-Site Scripting Vulnerability (CNVD-2020-17385)
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. A cross-site scripting vulnerability exists in GitLab versions 12.1 through 12.8.1. The vulnerabili...
CVE-2020-10078
GitLab versions 12.1–12.8.1 are affected by a stored XSS vulnerability in the merge request submission form. The issue arises from insufficient validation of client-side data in the web application, enabling an attacker to execute arbitrary scripts in the context of a victim’s browser. Impact is ...
PT-2020-11903 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions 12.1 through 12.8.1 Description: The issue is related to a stored cross-site scripting vulnerability in the merge request submission form. This allows for XSS attacks. Recommendations: For GitLab versions 12.1 through 12.8.1,...
PT-2020-11917 · Gitlab +1 · Gitlab +1
Name of the Vulnerable Software and Affected Versions: GitLab versions 12.1 through 12.8.1 Description: A cross-site scripting issue was found in a specific view related to the Grafana integration, allowing for potential exploitation. Recommendations: For versions 12.1 through 12.8.1, update to a...
PT-2020-11933 · Citrix · Citrix Adc +1
Name of the Vulnerable Software and Affected Versions: Citrix Gateway versions 11.1 through 12.1 Description: The issue concerns an Inconsistent Interpretation of HTTP Requests. It is noted that Citrix disputes the reported behavior as not a security issue, stating that Citrix ADC only caches...
PT-2020-11932 · Citrix · Citrix Adc +1
Name of the Vulnerable Software and Affected Versions: Citrix Gateway versions 11.1 through 12.1 Description: The issue allows Information Exposure Through Caching. The Via header lists cache protocols and recipients between the start and end points for a request or a response. The Age header...
Heap overflow
In FreeBSD 12.1-STABLE before r357213, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r357214, and 11.3-RELEASE before 11.3-RELEASE-p6, URL handling in libfetch with URLs containing username and/or password components is vulnerable to a heap buffer...
Code injection
In FreeBSD 12.1-STABLE before r354734, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r354735, and 11.3-RELEASE before 11.3-RELEASE-p6, due to incorrect initialization of a stack data structure, core dump files may contain up to 20 bytes of kernel da...
CVE-2019-15875
Removed by vendor...
CVE-2020-7450
In FreeBSD 12.1-STABLE before r357213, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r357214, and 11.3-RELEASE before 11.3-RELEASE-p6, URL handling in libfetch with URLs containing username and/or password components is vulnerable to a heap buffer...
CVE-2019-8535
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...
