xxl-job Information Disclosure Vulnerability

xxl-job is a distributed task scheduling platform with core design goals of rapid development, simple learning, lightweight, and easy scalability. An information disclosure vulnerability exists in xxl-job 2.2.0, which can be exploited by an attacker to obtain username, model, and password...

CVE-2020-23811

xxl-job 2.2.0 allows Information Disclosure of username, model, and password via job/admin/controller/UserController.java...

CVE-2020-23811

xxl-job 2.2.0 allows Information Disclosure of username, model, and password via job/admin/controller/UserController.java...

Cross-Site Scripting in @toast-ui/editor

Versions of @toast-ui/editor prior to 2.2.0 are vulnerable to Cross-Site Scripting XSS. There are multiple bypasses to the package's built-in XSS sanitization. This may allow attackers to execute arbitrary JavaScript on a victim's browser. Recommendation Upgrade to version 2.2.0 or later...

GHSA-VCG5-9XW6-R56C Malicious Package in logsymbles

Version 2.2.0 of logsymbles contains malicious code as a preinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads a file from a remote server, executes it and opens a backdoor...

Malicious Package in logsymbles

Version 2.2.0 of logsymbles contains malicious code as a preinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads a file from a remote server, executes it and opens a backdoor...

PT-2020-15815 · Wso2 · Wso2 Identity Server Analytics +8

Name of the Vulnerable Software and Affected Versions: WSO2 API Manager versions 2.2.0 WSO2 API Manager Analytics versions 2.2.0 WSO2 API Microgateway versions 2.2.0 WSO2 Data Analytics Server versions 3.2.0 WSO2 Enterprise Integrator versions through 6.6.0 WSO2 IS as Key Manager versions 5.5.0...

PT-2020-15752 · Wso2 · Api Microgateway +1

Name of the Vulnerable Software and Affected Versions: WSO2 API Manager versions prior to 3.1.0 API Microgateway version 2.2.0 Description: The issue allows XML External Entity injection XXE attacks. XXE attacks occur when an application parses XML input that contains malicious external entities,...

Integer Overflow

freerdp is vulnerable to Integer Overflow. The vulnerability is present because the input rectangles received from the server are not checked against local surface coordinates and are blindly accepted. This oversight allows an attacker to potentially crash the application by sending malicious dat...

CVE-2020-5612

Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL...

CVE-2020-15103

In FreeRDP less than or equal to 2.1.2, an integer overflow exists due to missing input sanitation in rdpegfx channel. All FreeRDP clients are affected. The input rectangles from the server are not checked against local surface coordinates and blindly accepted. A malicious server can send data th...

CVE-2020-15103

In FreeRDP less than or equal to 2.1.2, an integer overflow exists due to missing input sanitation in rdpegfx channel. All FreeRDP clients are affected. The input rectangles from the server are not checked against local surface coordinates and blindly accepted. A malicious server can send data th...

Security fix for the ALT Linux 9 package freerdp version 2.2.0-alt1

2.2.0-alt1 built July 23, 2020 Andrey Cherepanov in task 255257 July 21, 2020 Andrey Cherepanov - New version. - Fixes: + CVE-2020-15103 - Integer overflow due to missing input sanitation in rdpegfx channel...

DEBIAN-CVE-2020-8161

A directory traversal vulnerability exists in rack 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure...

CVE-2020-8161

A directory traversal vulnerability exists in rack 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure...

CVE-2020-8161

A directory traversal vulnerability exists in rack 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure...

CVE-2020-8161

A directory traversal vulnerability exists in rack 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in information disclosure...

Mattermost Server Cross-Site Scripting Vulnerability (CNVD-2020-35334)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A cross-site scripting vulnerability exists in Mattermost Server versions prior to 2.2.0. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An...

Mattermost Server Cross-Site Scripting Vulnerability (CNVD-2020-35333)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A cross-site scripting vulnerability exists in Mattermost Server versions prior to 2.2.0. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An...

CVE-2016-11082

CVE-2016-11082 affects Mattermost Server prior to 2.2.0. The issue enables cross-site scripting (XSS) via a crafted link in the Mattermost web application. The root cause, as described in the sources, is a lack of proper validation of client-side data by the web application. The practical impact ...