CVE-2020-14015

An issue was discovered in Navigate CMS 2.9 r1433. When performing a password reset, a user is emailed an activation code that allows them to reset their password. There is, however, a flaw when no activation code is supplied. The system will allow an unauthorized user to continue setting a...

CVE-2019-20873

An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows attackers to obtain sensitive information during user activation/deactivation...

CVE-2019-20873

An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows attackers to obtain sensitive information during user activation/deactivation...

CVE-2019-20873

An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows attackers to obtain sensitive information during user activation/deactivation...

CVE-2019-20873

Technical details about CVE-2019-20873 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.

Navigate CMS 2.8.7 - (sidx) SQL Injection (Authenticated) Exploit

Exploit for php platform in category web applications Exploit Title: Navigate CMS 2.8.7 - ''sidx' SQL Injection Authenticated Exploit Author: Gus Ralph Vendor Homepage: https://www.navigatecms.com/en/home Software Link:...

Navigate CMS 2.8.7 SQL Injection

Exploit Title: Navigate CMS 2.8.7 - ''sidx' SQL Injection Authenticated Date: 2020-06-04 Exploit Author: Gus Ralph Vendor Homepage: https://www.navigatecms.com/en/home Software Link: https://sourceforge.net/projects/navigatecms/files/releases/navigate-2.8.7r1401.zip/download Version: 2.8.7 Tested...

Navigate CMS 2.8.7 - ''sidx' SQL Injection (Authenticated)

Exploit Title: Navigate CMS 2.8.7 - ''sidx' SQL Injection Authenticated Date: 2020-06-04 Exploit Author: Gus Ralph Vendor Homepage: https://www.navigatecms.com/en/home Software Link: https://sourceforge.net/projects/navigatecms/files/releases/navigate-2.8.7r1401.zip/download Version: 2.8.7 Tested...

May 12, 2020—KB4556843 (Security-only update)

None None...

May 12, 2020—KB4556854 (Security-only update)

None None...

Internet Explorer help

None None...

CVE-2020-12277

GitLab 10.8 through 12.9 has a vulnerability that allows someone to mirror a repository even if the feature is not activated...

CVE-2020-12277

Removed by vendor...

Moderate: Red Hat Security Advisory: systemd security, bug fix, and enhancement update

An update for systemd is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

April 14, 2020—KB4550965 (Security-only update)

None None...

The vulnerability of Firefox browser, related to security elements and the activation of functions from an unreliable controlled area, allows attackers to access confidential data.

The vulnerability of Firefox browsers is related to improper checking of the uploaded file, which can be exploited in a cross-domain scenario. Exploiting this vulnerability allows an attacker operating remotely to gain access to confidential data...

Update helps unmanaged Office 2010 users work with Microsoft RMS in Windows

Update helps unmanaged Office 2010 users work with Microsoft RMS in Windows Introduction This article describes an update for Microsoft Digital Rights Management MSDRM clients in Windows 7, Windows 8, Windows 8.1, Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2. This updat...

Incorrect disclaimer is displayed in the Product Activation wizard in the Polish version of Windows 7 SP1 and Windows Server 2008 R2 SP1

Incorrect disclaimer is displayed in the Product Activation wizard in the Polish version of Windows 7 SP1 and Windows Server 2008 R2 SP1 Symptoms Consider the following scenario: You try to activate Windows 7 Service Pack 1 SP1 or Windows Server 2008 R2 SP1 by using the Product Activation wizard...

Activation doesn't work if the sppsvc.exe process doesn't start automatically in Windows 8 or Windows Server 2012

Activation doesn't work if the sppsvc.exe process doesn't start automatically in Windows 8 or Windows Server 2012 This issue occurs because the Task Scheduler does not correctly trigger certain events, including the rescheduling of events, when the computer is started after an overdue task...

Product Key Explorer 4.2.2.0 Denial Of Service

Exploit Title: Product Key Explorer 4.2.2.0 - 'Key' Denial of Service PoC Discovery by: 0xMoHassan Date: 2020-04-04 Vendor Homepage: http://www.nsauditor.com Software Link: http://www.nsauditor.com/downloads/productkeyexplorersetup.exe Tested Version: 4.2.2.0 Vulnerability Type: Denial of Service...