Improper access control

Sonatype Nexus Repository Manager 3.x up to and including 3.21.2 has Incorrect Access Control...

Fedora 30 : phpMyAdmin (2020-25f3aea389)

The phpMyAdmin team announces the release of both 4.9.5 and 5.0.2. Both versions contain several security fixes : - PMASA-2020-2 SQL injection vulnerability in the user accounts page, particularly when changing a password - PMASA-2020-3 SQL injection vulnerability relating to the search feature -...

Design/Logic Flaw

On BIG-IP 15.1.0.1, specially formatted HTTP/3 messages may cause TMM to produce a core file...

CVE-2020-5859

Summary of CVE-2020-5859 (BIG-IP HTTP/3 QUIC vulnerability) : The issue affects BIG-IP with the HTTP/3 QUIC profile configured, where specially formatted HTTP/3 messages may cause TMM to crash (core dump) and potentially restart, disrupting traffic processing. Impact includes temporary traffic pr...

CVE-2020-5859

On BIG-IP 15.1.0.1, specially formatted HTTP/3 messages may cause TMM to produce a core file...

F5 Networks BIG-IP : BIG-IP HTTP/3 QUIC vulnerability (K61367237)

Specially formatted HTTP/3 messages may cause the Traffic Management Microkernel TMM to produce a core file. CVE-2020-5859 Impact TMM may restart and temporarily fail to process traffic on BIG-IP hosts with the HTTP/3 QUIC profile configured. High availability HA configurations will fail over the...

CVE-2020-9375

TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a denial of service via a crafted HTTP Header containing an unexpected Referer field...

[SECURITY] Fedora 31 Update: webkit2gtk3-2.28.0-6.fc31

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...

Fedora: Security Advisory for webkit2gtk3 (FEDORA-2020-f25793aac4)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

seadrill.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1123654 Security Researcher securaji Helped patch 77 vulnerabilities Received 3 Coordinated Disclosure badges Received 4 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting seadrill.com website and its...

Apple Security Update: iOS 12.4.6

Apple recommends to install security update iOS 12.4.6 on devices iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPod touch 6th generation...

Intel Raid Web Console 3 add server denial-of-service vulnerability

Summary A remote, exploitable denial-of-service vulnerability exists in the web API functionality of Intel Raid Web Console 3. A specially crafted request can lead to a null pointer dereference in the Intel Raid Web Console server. This would result in a denial of service until the user restarts...

Apple Security Update: watchOS 5.3.6

Apple recommends to install security update watchOS 5.3.6 on devices Apple Watch Series 1, Apple Watch Series 2, Apple Watch Series 3, and Apple Watch Series 4 when paired to an iPhone with iOS 12 installed...

Apple Security Update: iOS 12.4.6

Apple recommends to install security update iOS 12.4.6 on devices iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPod touch 6th generation...

phpMyAdmin < 4.9.5, 5.x < 5.0.2 Multiple SQL Injection Vulnerabilities (PMASA-2020-2, PMASA-2020-3, PMASA-2020-4) - Linux

phpMyAdmin is prone to multiple SQL injection vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

phpMyAdmin < 4.9.5, 5.x < 5.0.2 Multiple SQL Injection Vulnerabilities (PMASA-2020-2, PMASA-2020-3, PMASA-2020-4) - Windows

phpMyAdmin is prone to multiple SQL injection vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Joomla! com_hdwplayer 4.2 - search.php SQL Injection

Joomla! comhdwplayer 4.2 - search.php SQL Injection Exploit Title: Joomla! comhdwplayer 4.2 - 'search.php' SQL Injection Dork: inurl:"index.php?option=comhdwplayer" Date: 2020-03-23 Exploit Author: qw3rTyTy Vendor Homepage: https://www.hdwplayer.com/ Software Link:...

CVE-2020-10558

The driving interface of Tesla Model 3 vehicles in any release before 2020.4.10 allows Denial of Service to occur due to improper process separation, which allows attackers to disable the speedometer, web browser, climate controls, turn signal visual and sounds, navigation, autopilot notification...

CVE-2020-10558

The driving interface of Tesla Model 3 vehicles in any release before 2020.4.10 allows Denial of Service to occur due to improper process separation, which allows attackers to disable the speedometer, web browser, climate controls, turn signal visual and sounds, navigation, autopilot notification...

CVE-2020-10558

CVE-2020-10558 affects the Tesla Model 3 driving interface in any release prior to 2020.4.10. The issue is a Denial of Service caused by improper process separation, enabling an attacker to disable the speedometer, web browser, climate controls, turn signal visuals and sounds, navigation, autopil...