827 matches found
CVE-2020-25085
QEMU 5.0.0 has a heap-based Buffer Overflow in flatviewreadcontinue in exec.c because hw/sd/sdhci.c mishandles a write operation in the SDHCBLKSIZE case...
UBUNTU-CVE-2020-25084
QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usbpacketmap return value is not checked...
CVE-2020-25084
QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usbpacketmap return value is not checked...
CVE-2020-25625
hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop...
CVE-2020-25625
QEMU before 5.2.0 is vulnerable to an infinite loop in the USB OHCI emulator (hw/usb/hcd-ohci.c) when a TD list contains a loop, potentially allowing a guest or host process to exhaust CPU or cause a denial of service. The issue is observed in QEMU 5.0.0; remediation is to upgrade to 5.2.0 or new...
CVE-2020-25084
QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usbpacketmap return value is not checked...
CVE-2020-25084
QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usbpacketmap return value is not checked...
Security Bulletin: Openstack Keystone vulnerabilities affects IBM Spectrum Scale (CVE-2020-12689)
Summary IBM Spectrum Scale, shipped with Openstack keystone, is exposed to vulnerabilities as detailed below. Vulnerability Details CVEID: CVE-2020-12689 DESCRIPTION: OpenStack Keystone could allow a remote authenticated attacker to gain elevated privileges on the system, caused by improper...
QEMU <= 5.0.0 Multiple Vulnerabilities
QEMU is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribu...
QEMU 4.x < 5.0.0 Authentication Bypass Vulnerability
QEMU is prone to an authentication bypass vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...
Ruby on Rails < 5.0.1 RCE Vulnerability
Ruby on Rails is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2020-36772)
Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. A cross-site scripting vulnerability exists in Cybozu Garoon versions 5.0.0 through 5.0.1. An attacker can exploi...
CVE-2020-13362
In QEMU 5.0.0 and earlier, megasaslookupframe in hw/scsi/megasas.c has an out-of-bounds read via a crafted replyqueuehead field from a guest OS user...
CVE-2020-13362
In QEMU 5.0.0 and earlier, megasaslookupframe in hw/scsi/megasas.c has an out-of-bounds read via a crafted replyqueuehead field from a guest OS user...
IBM Spectrum Scale Unauthorized Operation Vulnerability (CNVD-2020-34638)
IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...
08cms (1.0.0), 0card-images-helper (1.0.2) +5063 more potentially affected by CVE-2020-7661 via url-regex (>=1.0.4, <=5.0.0)
url-regex NPM version =1.0.4, =1.0.3, =0.0.1, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.0.1 - 3e 1.0.0 and more Source cves: CVE-2020-7661 Source advisory: SNYK:JS-URLREGEX-569472...
CVE-2020-10187
Doorkeeper version 5.0.0 and later contains an information disclosure vulnerability that allows an attacker to retrieve the client secret only intended for the OAuth application owner. After authorizing the application and allowing access, the attacker simply needs to request the list of their...
CVE-2020-10187
Doorkeeper version 5.0.0 and later contains an information disclosure vulnerability that allows an attacker to retrieve the client secret only intended for the OAuth application owner. After authorizing the application and allowing access, the attacker simply needs to request the list of their...
CVE-2020-10187
Doorkeeper version 5.0.0 and later contains an information disclosure vulnerability that allows an attacker to retrieve the client secret only intended for the OAuth application owner. After authorizing the application and allowing access, the attacker simply needs to request the list of their...