1881 matches found
Rust Resource Management Error Vulnerability
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust actix-utils crate before 2.0.0, which stems from a Cell implementation that allows obtaining multiple mutable references to the same data...
Code injection
Apache Accumulo versions 1.5.0 through 1.10.0 and version 2.0.0 do not properly check the return value of some policy enforcement functions before permitting an authenticated user to perform certain administrative operations. Specifically, the return values of the 'canFlush' and...
PT-2020-15036 · Apache · Apache Accumulo
Name of the Vulnerable Software and Affected Versions: Apache Accumulo versions 1.5.0 through 1.10.0 Apache Accumulo version 2.0.0 Description: The issue arises from improper checking of return values of certain policy enforcement functions, specifically the canFlush and canPerformSystemActions...
Apache Accumulo 安全漏洞
Apache Accumulo is a reliable, scalable, high-performance sorted distributed Key-Value storage application from the Apache Foundation. An access control error vulnerability exists in Apache Accumulo versions 1.5.0 through 1.10.0 and 2.0.0 due to an authenticated user failing to properly check the...
CVE-2020-27730
In versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does not use absolute paths when calling system utilities...
Code injection
In versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does not use absolute paths when calling system utilities...
Remote code execution
Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25...
PT-2020-5501 · Apache · Apache Struts
Name of the Vulnerable Software and Affected Versions: Apache Struts versions 2.0.0 through 2.5.25 Description: The issue exists due to incorrect handling of Object Graph Navigation Language OGNL expressions in Apache Struts. This can allow a remote attacker to execute arbitrary code when forced...
PT-2020-16101
Name of the Vulnerable Software and Affected Versions TOTOLINK A3002RU version 2.0.0 B20190814.1034 Description The issue allows authenticated remote users to modify the system's 'Run Command'. An attacker can use this functionality to execute arbitrary OS commands on the router. Recommendations...
Ahdinosaur Set-in Security Vulnerability
Ahdinosaur Set-in is a Js-based codebase from the individual developer of Ahdinosaur that can assign values to keys in nested associative structures. A security vulnerability exists in Ahdinosaur Set-in versions 1.0.0 through 2.0.0, which stems from a prototype contamination vulnerability that...
keyget Security Vulnerabilities
Rumkin Keyget is a Js-based codebase for objects that can be modified by Rumkin's individual developers. A security vulnerability exists in keyget versions 1.0.0 through 2.0.0 that can be exploited by an attacker to cause a denial of service and potentially lead to remote code execution...
PT-2020-17143 · Blosc +1 · C-Blosc2 +1
Name of the Vulnerable Software and Affected Versions: Blosc C-Blosc2 versions through 2.0.0.beta.5 Description: The issue arises from a heap-based buffer overflow in the blosc2.c file when there is insufficient space to write compressed data. Recommendations: For versions through 2.0.0.beta.5,...
CVE-2020-29053
HRSALE 2.0.0 allows XSS via the admin/project/projectscalendar setdate parameter...
Design/Logic Flaw
HRSALE 2.0.0 allows XSS via the admin/project/projectscalendar setdate parameter...
CVE-2020-29053
HRSALE 2.0.0 allows XSS via the admin/project/projectscalendar setdate parameter...
CVE-2020-8897
A weak robustness vulnerability exists in the AWS Encryption SDKs for Java, Python, C and Javalcript prior to versions 2.0.0. Due to the non-committing property of AES-GCM and other AEAD ciphers such as AES-GCM-SIV or XChaCha20Poly1305 used by the SDKs to encrypt messages, an attacker can craft a...
freerdp: out-of-bounds read could result in aborting the session
In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bounds read. It only allows to abort a session. No data extraction is possible. This has been fixed in 2.0.0...
freerdp: out-of-bounds read in ntlm_read_ntlm_v2_client_challenge function
In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlmreadntlmv2clientchallenge that reads up to 28 bytes out-of-bound to an internal structure. This has been fixed in 2.1.0...