RHEL 8 : squid:4 (RHSA-2020:2038)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2038 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid:...

CVE-2019-20768

ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparmitemguid and sysid parameters in an Incident Request to servicecatalog.do...

sudo security, bug fix, and enhancement update

1.8.29-5 - RHEL 8.2 ERRATUM - CVE-2019-18634 Resolves: rhbz1798093 1.8.29-4 - RHEL 8.2 ERRATUM - CVE-2019-19232 Resolves: rhbz1786987 Resolves: rhbz1796518 1.8.29-2 - RHEL 8.2 ERRATUM - rebase to 1.8.29 Resolves: rhbz1733961 Resolves: rhbz1651662 1.8.28p1-1 - RHEL 8.2 ERRATUM - rebase to 1.8.28p1...

comune.ancarano.te.it Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1155728 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting comune.ancarano.te.it...

raanmon.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1155421 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting raanmon.com website and it...

Security Bulletin: Publicly disclosed vulnerability found by vFinder in IBM eDiscovery Analyzer

Summary Eclipse Jetty is vulnerable to HTTP request smuggling, caused by a flaw when handling more than one Content-Length headers. By sending a specially-crafted request, an attacker could exploit this vulnerability to poison the web cache, bypass web application firewall protection, and conduct...

Red Hat Resteasy Input Validation Error Vulnerability

Red Hat Resteasy is the United States Red Hat Red Hat, a JAX-RS a Java programming language API specification implementation. An input validation error vulnerability exists in Red Hat Resteasy versions 3.x.x prior to 3.12.0.Final and 4.x.x prior to 4.6.0.Final, which arises from a networked syste...

newchurchaudio.org Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1151244 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting newchurchaudio.org websit...

xvideos10.blog.br Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1150440 Security Researcher DkilerS2 Helped patch 112 vulnerabilities Received 4 Coordinated Disclosure badges Received 8 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting xvideos10.blog.br website a...

CVE-2020-6212

Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP versions 618, 730, EAPPLGLO 607 and S/4 HANA versions 100, 101, 102, 103, 104 do not perform necessary authorization checks for an authenticated user, allowing reading or modification o...

Authorization

Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP versions 618, 730, EAPPLGLO 607 and S/4 HANA versions 100, 101, 102, 103, 104 do not perform necessary authorization checks for an authenticated user, allowing reading or modification o...

CVE-2020-6212

Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP versions 618, 730, EAPPLGLO 607 and S/4 HANA versions 100, 101, 102, 103, 104 do not perform necessary authorization checks for an authenticated user, allowing reading or modification o...

CVE-2020-6212

The CVE-2020-6212 entry affects SAP ERP and SAP S/4HANA. Specifically, it concerns Egypt localization reports: Clearing of Liabilities, Remittance Statement, and Summary for SAP ERP versions 618, 730, EAPPLGLO 607, and SAP S/4 HANA versions 100–104. The root cause is Missing Authorization Check, ...

Squid Security Update Advisory (SQUID-2020:4)

Squid is prone to multiple vulnerabilities in the HTTP Digest authentication. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...

CVE-2020-6212: Missing Authorization

Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP versions 618, 730, EAPPLGLO 607 and S/4 HANA versions 100, 101, 102, 103, 104 do not perform necessary authorization checks for an authenticated user, allowing reading or modification o...

PT-2020-19011

Name of the Vulnerable Software and Affected Versions SAP ERP versions 607 through 730 S/4 HANA versions 100 through 104 Description The issue concerns the Egypt localized withholding tax reports in SAP systems, where the Clearing of Liabilities and Remittance Statement and Summary do not perform...

PT-2020-14913 · Freeipa +6 · Ipa +6

Name of the Vulnerable Software and Affected Versions: ipa versions 4.x.x through 4.8.0 Description: A flaw was found in the password hashing process. When a very long password = 1,000,000 characters is sent to the server, it could exhaust memory and CPU, leading to a denial of service and the...

film.org.pl Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1144890 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting film.org.pl website and i...

Important: Red Hat Security Advisory: kernel-alt security and bug fix update

An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

Default credentials

In SilverStripe through 4.5, files uploaded via Forms to folders migrated from Silverstripe CMS 3.x may be put to the default "/Uploads" folder instead. This affects installations which allowed upload folder protection via the optional silverstripe/secureassets module under 3.x. This module is...