Lucene search
+L

4813 matches found

Mend
Mend
•added 2020/09/10 6:40 p.m.•7 views

CVE-2020-15170

apollo-adminservice before version 1.7.1 does not implement access controls. If users expose apollo-adminservice to internetwhich is not recommended, there are potential security issues since apollo-adminservice is designed to work in intranet and it doesn't have access control built-in. Maliciou...

8.3CVSS0.01315EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/10 12:00 a.m.•8 views

CVE-2020-15170: Improper Input Validation

apollo-adminservice before version 1.7.1 does not implement access controls. If users expose apollo-adminservice to internetwhich is not recommended, there are potential security issues since apollo-adminservice is designed to work in intranet and it doesn't have access control built-in. Maliciou...

7CVSS5.8AI score0.01315EPSS
SaveExploits0References2
GitLab Advisory Database
GitLab Advisory Database
•added 2020/09/10 12:00 a.m.•69 views

Improper Input Validation

apollo-adminservice does not implement access controls. If users expose apollo-adminservice to internetwhich is not recommended, there are potential security issues since apollo-adminservice is designed to work in intranet and it does not have access control built-in. Malicious hackers may access...

7CVSS4.1AI score0.01315EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2020/08/17 6:15 p.m.•22 views

CVE-2020-3472

A vulnerability in the contacts feature of Cisco Webex Meetings could allow an authenticated, remote attacker with a legitimate user account to access sensitive information. The vulnerability is due to improper access restrictions on users who are added within user contacts. An attacker on one...

5CVSS5.8AI score0.01133EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/08/12 2:15 p.m.•20 views

CVE-2020-6293

SAP NetWeaver Knowledge Management, versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to upload a malicious file and also to access, modify or make unavailable existing files but the impact is limited to the files themselves and is restricted by other policies such as access...

6.5CVSS6.9AI score0.00934EPSS
SaveExploits0References2
CNVD
CNVD
•added 2020/08/07 12:00 a.m.•16 views

Unspecified Vulnerability in RIPE NCC RPKI Validator (CNVD-2020-52431)

RIPE NCC RPKI Validator is an RPKI validator from RIPE NCC in the Netherlands. A security vulnerability exists in version 3.x of RIPE NCC RPKI Validator prior to 3.1-2020.07.06.14.28. A remote attacker could exploit the vulnerability to bypass access restrictions...

9.1CVSS6.9AI score0.01272EPSS
SaveExploits0References1
WPVulnDB
WPVulnDB
•added 2020/08/04 12:00 a.m.•19 views

CMP - Coming Soon & Maintenance < 3.8.2 - Improper Access Controls on AJAX Calls

Some of the AJAX calls from the plugin do not properly check for capabilities and CSRF tokens, leading to issues such as arbitrary post read, subscribers list export and plugin deactivation...

3.1AI score
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2020/07/30 7:14 a.m.•38 views

CVE-2020-15900

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

7.5CVSS2AI score0.05186EPSS
SaveExploits0References3
NVD
NVD
•added 2020/07/28 4:15 p.m.•29 views

CVE-2020-15900

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

9.8CVSS9.5AI score0.05186EPSS
SaveExploits0References9
osv_cve
osv_cve
•added 2020/07/28 4:15 p.m.•41 views

CVE-2020-15900

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

9.8CVSS6.8AI score
SaveExploits0References9
osv_debian
osv_debian
•added 2020/07/28 4:15 p.m.•5 views

DEBIAN-CVE-2020-15900

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

9.8CVSS8.5AI score0.05186EPSS
SaveExploits0References1
Prion
Prion
•added 2020/07/28 4:15 p.m.•35 views

Memory corruption

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

7.5CVSS9.4AI score0.05186EPSS
SaveExploits0References9Affected Software3
UbuntuCve
UbuntuCve
•added 2020/07/28 4:15 p.m.•41 views

CVE-2020-15900

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

9.8CVSS7.1AI score0.05186EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2020/07/28 3:17 p.m.•103 views

CVE-2020-15900

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

9.8CVSS9.6AI score0.05186EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2020/07/28 3:17 p.m.•90 views

CVE-2020-15900

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

9.8CVSS9.6AI score0.05186EPSS
SaveExploits0
Mend
Mend
•added 2020/07/28 3:17 p.m.•5 views

CVE-2020-15900

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

9.8CVSS0.05186EPSS
SaveExploits0References14
Cvelist
Cvelist
•added 2020/07/28 3:17 p.m.•67 views

CVE-2020-15900

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

9.5AI score0.05186EPSS
SaveExploits0References9
FreeBSD
FreeBSD
•added 2020/07/28 12:00 a.m.•32 views

Ghostscript -- SAFER Sandbox Breakout

NVD reports: A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t...

9.8CVSS9.3AI score0.05186EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/07/28 12:00 a.m.•3 views

PT-2020-14698

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions 9.50 through 9.52 Description A memory corruption issue was found in Artifex Ghostscript, allowing overriding of file access controls through the use of a non-standard PostScript operator. The rsearch calculation f...

9.8CVSS0.05186EPSS
SaveExploits0References80
attackerkb
attackerkb
•added 2020/07/28 12:00 a.m.•51 views

CVE-2020-15900

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The ‘rsearch’ calculation for the ‘post’ size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

9.8CVSS0.05186EPSS
SaveExploits0References10
Rows per page
Query Builder