CVE-2020-11444

Sonatype Nexus Repository Manager 3.x up to and including 3.21.2 has Incorrect Access Control...

Improper access control

Sonatype Nexus Repository Manager 3.x up to and including 3.21.2 has Incorrect Access Control...

CVE-2020-10199

Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection issue 1 of 2...

CVE-2020-10203

Sonatype Nexus Repository before 3.21.2 allows XSS...

CVE-2020-10204

Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution...

CVE-2020-10203

Sonatype Nexus Repository before 3.21.2 allows XSS...

CVE-2020-10204

CVE-2020-10204 is a remote code execution vulnerability in Sonatype Nexus Repository Manager (NXRM) prior to version 3.21.2. The affected component is Nexus Repository Manager, with the root cause described across connected advisories as an RCE in versions before 3.21.2. Publicly available materi...

CVE-2020-10203

Sonatype Nexus Repository before 3.21.2 allows XSS...

PT-2020-6522 · Sonatype · Sonatype Nexus Repository +1

Name of the Vulnerable Software and Affected Versions: Sonatype Nexus Repository versions prior to 3.21.2 Description: The issue is related to incorrect code generation management in the Sonatype Nexus Repository Manager, which can be exploited by a remote attacker to execute arbitrary code by...

GNOME evolution-data-server IMAPx component information disclosure vulnerability

GNOME evolution-data-server is the GNOME project's set of mail data servers for the Gnome desktop environment on Linux.IMAPx is one of the components used to handle mail and folders. An information disclosure vulnerability exists in the camel/providers/imapx/camel-imapx-server.c file of the IMAPx...