CVE-2020-4941

IBM Edge 4.2 could reveal sensitive version information about the server from error pages that could aid an attacker in further attacks against the system. IBM X-Force ID: 191941...

CVE-2020-4809

IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189633...

CVE-2020-4809

CVE-2020-4809 affects IBM Edge 4.2. The vulnerability is an information-disclosure issue where a user can read locally stored web pages created by IBM Edge, indicating a local-access impact and confidentiality breach. Root cause: IBM Edge’s handling/storage of web pages allows local retrieval by ...

CVE-2020-4805

CVE-2020-4805 affects IBM Edge 4.2 and is described as a local information-disclosure vulnerability where web pages can be stored locally and read by another user on the same system. IBM’s bulletin confirms a cache-control vulnerability with a remediation: upgrade via a set of docker images pulle...

CVE-2020-4805

IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189539...

CVE-2020-4803

IBM Edge 4.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 189535...

CVE-2020-4803

CVE-2020-4803 : IBM Edge 4.2 is affected by a cache-control information-disclosure vulnerability that allows locally stored web pages to be read by another user on the same system. The IBM advisory indicates affected product/version and a remediation consisting of a docker image upgrade pulled fr...

CVE-2020-4941

IBM Edge 4.2 could reveal sensitive version information about the server from error pages that could aid an attacker in further attacks against the system. IBM X-Force ID: 191941...

SUSE-SU-2021:3170-1 Security update for SUSE Manager Server 4.2

This update fixes the following issues: branch-network-formula: - Use kernel parameters from PXE formula also for local boot cobbler - security issues fixed: - CVE-2021-40323: Fixed an arbitrary file disclosure/Template Injection bsc1189458 - CVE-2021-40324: Fixed an arbitrary file write bsc11894...

Oracle Linux 8 : kernel (ELSA-2021-3447)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-3447 advisory. - KVM: PPC: Book3S: Fix HRTAS rets buffer overflow Jon Maloy 1988225 1988226 CVE-2021-37576 Tenable has extracted the preceding description block...

CVE-2021-36000

Adobe Character Animator version 4.2 and earlier is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

PT-2021-7414 · Redmine · Redmine

Name of the Vulnerable Software and Affected Versions: Redmine versions 4.1.5 and earlier Redmine versions 4.2.x before 4.2.3 Description: The issue is related to an insufficient access filter, which may disclose the names of users on activity views. This allows a remote attacker to access...

CVE-2021-38201

A flaw was found in the Linux kernel that allows remote attackers to cause a denial of service xdrsetpagebase slab-out-of-bounds access by performing many NFS 4.2 READPLUS operations. The highest threat from this vulnerability is to system availability. Mitigation Mitigation for this issue is...

Cross site scripting via HTML attributes in the back end

Date : 2021-08-11 CVE ID : CVE-2021-35955 Description It is possible for untrusted users to inject malicious code into HTML attributes in the back end, which will be executed both in the element preview back end and on the website front end. Installations are only affected if there are untrusted...

CVE-2020-21697

A heap-use-after-free in the mpegmuxwritepacket function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service DOS via a crafted avi file...

DEBIAN-CVE-2020-21697

A heap-use-after-free in the mpegmuxwritepacket function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service DOS via a crafted avi file...

CVE-2020-21690

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-20451. Reason: This candidate is a duplicate of CVE-2020-20451. Notes: All CVE users should reference CVE-2020-20451 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

UBUNTU-CVE-2020-21688

A heap-use-after-free in the avfreep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code...

CVE-2020-21688

A heap-use-after-free in the avfreep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code...

CVE-2020-21688

CVE-2020-21688 describes a heap-use-after-free in FFmpeg’s libavutil/mem.c av_freep, affecting FFmpeg 4.2 and enabling arbitrary code execution under plausible conditions. Public references in connected documents indicate the issue pertains to FFmpeg 4.2, with surrounding advisories noting the vu...