1482 matches found
CentOS 8 : GNOME (CESA-2020:4451)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4451 advisory. - webkitgtk: Incorrect state management leading to universal cross-site scripting CVE-2019-8625, CVE-2019-8813, CVE-2020-3867 - webkitgtk: Multiple...
CentOS 8 : virt:rhel (CESA-2020:4059)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4059 advisory. - QEMU: slirp: networking out-of-bounds read information disclosure vulnerability CVE-2020-10756 - QEMU: usb: out-of-bounds r/w access issue while...
OPENSUSE-SU-2021:0072-1 Security update for dovecot23
This update for dovecot23 fixes the following issues: Security issues fixed: - CVE-2020-12100: Fixed a resource exhaustion caused by deeply nested MIME parts bsc1174920. - CVE-2020-24386: Fixed an issue with IMAP hibernation that allowed users to access other users' emails bsc1180405. -...
SUSE-SU-2021:0027-1 Security update for dovecot23
This update for dovecot23 fixes the following issues: Security issues fixed: - CVE-2020-12100: Fixed a resource exhaustion caused by deeply nested MIME parts bsc1174920. - CVE-2020-24386: Fixed an issue with IMAP hibernation that allowed users to access other users' emails bsc1180405. -...
CVE-2020-35849
An issue was discovered in MantisBT before 2.24.4. An incorrect access check in bugrevisionviewpage.php allows an unprivileged attacker to view the Summary field of private issues, as well as bugnotes revisions, gaining access to potentially confidential information via the bugnoteid parameter...
CVE-2020-26412
Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics starting in GitLab EE 13.2 before 13.6.2...
CVE-2020-9969
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. A local user may be able to view senstive user information...
CVE-2020-10012
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.0.1. Processing a maliciously crafted document may lead to a cross site scripting attack...
Design/Logic Flaw
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. A local user may be able to view senstive user information...
CVE-2020-10012
CVE-2020-10012 affects macOS Big Sur 11.0.1. The issue is described as an access issue where improved access restrictions were applied, and processing a maliciously crafted document may lead to a cross-site scripting (XSS) attack. Apple’s advisory confirms the fix is included in macOS Big Sur 11....
CVE-2020-9969
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. A local user may be able to view senstive user information...
CVE-2020-9969
CVE-2020-9969 affects macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. Description from Apple Security Advisories shows an access issue that allowed a local user to view sensitive information, addressed by applying additional sandbox restrictions. The remediation is upgradi...
OPENSUSE-SU-2020:2186-1 Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2020-25712: Fixed a heap-based buffer overflow which could have led to privilege escalation bsc1177596. - CVE-2020-14360: Fixed an out of bounds memory accesses on too short request which could lead to denial of service bsc1174908...
HCL Domino Login Cross-Site Request Forgery Vulnerability
HCL Domino is a suite of enterprise-class application development platforms from HCL India. HCL Domino has a security vulnerability. An attacker can exploit the vulnerability by tricking a user into accessing the system using another ID, or accessing the internal system from the internet using th...
OPENSUSE-SU-2020:1970-1 Security update for tor
This update for tor fixes the following issues: Updating tor to a newer version in the respective codestream. - tor 0.3.5.12: Check channels+circuits on relays more thoroughly TROVE-2020-005, boo1178741 Not affected by out-of-bound memory access CVE-2020-15572, boo1173979 Fix DoS defenses on...
SUSE-SU-2020:3385-1 Security update for perl-DBI
This update for perl-DBI fixes the following issues: - DBD::File drivers could open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. bsc1176492, CVE-2014-10401, CVE-2014-10402...
SUSE-SU-2020:3384-1 Security update for perl-DBI
This update for perl-DBI fixes the following issues: - DBD::File drivers can open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. bsc1176492, CVE-2014-10401, CVE-2014-10402...
RHEL 7 : qemu-kvm (RHSA-2020:4052)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4052 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the...
webkitgtk: Access issue in content security policy
An access issue existed in Content Security Policy. This issue was addressed with improved access restrictions. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing...