11645 matches found
freerdp security update
2.0.0-4.rc4 - CVE-2020-11521: Fix out-of-bounds write in planar.c 1837621 - CVE-2020-11523: Fix integer overflow in region.c 1837622 - CVE-2020-11524: Fix out-of-bounds write in interleaved.c 1837623...
carseek.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1184305 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
freedos.10956.n7.nabble.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1183831 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
emilysoutherland.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1183237 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
donny.co.uk Cross Site Scripting vulnerability OBB-1183227
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Arbitrary Code Execution
ffmpeg is vulnerable to arbitrary code execution. The vulnerability exists as the studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1 before 4.1.2 allows remote attackers to cause a denial of service out-of-array access or possibly have unspecified other impact...
PT-2020-15408 · Jenkins · Jenkins Echarts Api Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins ECharts API Plugin versions 4.7.0-3 and earlier Description: The issue results in a stored cross-site scripting vulnerability due to the failure to escape the display name of the builds in the trend chart. This can be exploited by use...
antique-4-sale.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1181736 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Exploit for Out-of-bounds Write in Google Android
CVE-2020-12753-PoC This repo contains a proof-of-concept for 🔋...
MuleSoft Mule Resource Management Error Vulnerability
MuleSoft Mule is a lightweight integration platform from MuleSoft, USA. The platform supports management of message routing between nodes, data mapping, and more. A security vulnerability exists in MuleSoft Mule Community and Enterprise Editions versions 3.8.x, 3.9.x, and 4.x released before Apri...
Apple Security Update: iOS 13.5.1 and iPadOS 13.5.1
Apple recommends to install security update iOS 13.5.1 and iPadOS 13.5.1 on devices iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch 7th generation...
Apple Security Update: iOS 13.5.1 and iPadOS 13.5.1
Apple recommends to install security update iOS 13.5.1 and iPadOS 13.5.1 on devices iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch 7th generation...
keystone:fuzz_asm_x86_16: Heap-use-after-free in llvm_ks::X86Operand::getToken
Project: https://github.com/keystone-engine/keystone.git Detailed Report: https://oss-fuzz.com/testcase?key=5637154293415936 Project: keystone Fuzzing Engine: afl Fuzz Target: fuzzasmx8616 Job Type: aflasankeystone Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...
matio:matio_fuzzer: Heap-buffer-overflow in Mat_int32Swap
Detailed Report: https://oss-fuzz.com/testcase?key=5769187560783872 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerasani386matio Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0xf26fe87c Crash State: Matint32Swap ReadInt32DataInt32...
Ubuntu: Security Advisory (USN-4360-4)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Apple Security Update: iOS 13.5 and iPadOS 13.5 (details available soon)
Apple recommends to install security update iOS 13.5 and iPadOS 13.5 details available soon on devices iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch 7th generation...
CVE-2019-19454: Undefined Security Weakness
An arbitrary file download was found in the "Download Log" functionality of Wowza Streaming Engine = 4.x.x. This issue was resolved in Wowza Streaming Engine 4.8.0...
Emerson WirelessHART Gateway
1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Emerson Equipment: Emerson WirelessHART Gateways 1410, 1420 and 1552WU Vulnerability: Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could disable the...
RHEL 8 : squid:4 (RHSA-2020:2039)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2039 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid:...
RHEL 8 : squid:4 (RHSA-2020:2041)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2041 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid:...