3332 matches found
Cross site scripting
In GitLab before 13.0.12, 13.1.6, and 13.2.3, a stored XSS vulnerability exists in the CI/CD Jobs page...
CVE-2020-13288
CVE-2020-13288 is a stored XSS vulnerability in GitLab’s CI/CD Jobs page affecting versions prior to 13.0.12, 13.1.6, and 13.2.3. Root cause: stored XSS in the Jobs page. Impact: could allow script execution or injection impacting where the Jobs page is viewed. Affected products: GitLab (versions...
CVE-2020-13288
Removed by vendor...
CVE-2020-13288
In GitLab before 13.0.12, 13.1.6, and 13.2.3, a stored XSS vulnerability exists in the CI/CD Jobs page...
CVE-2020-13288: Improper Neutralization of Input During Web Page Generation
In GitLab before 13.0.12, 13.1.6, and 13.2.3, a stored XSS vulnerability exists in the CI/CD Jobs page...
Security Bulletin: IBM MQ is affected by a vulnerability within IBM WebSphere Liberty (CVE-2020-4329)
Summary A vulnerability has been found within the version of IBM WebSphere Liberty shipped with IBM MQ. Vulnerability Details CVEID: CVE-2020-4329 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated attacker to...
CVE-2019-4731
IBM MQ Appliance vulnerability CVE-2019-4731 allows a local attacker to obtain highly sensitive information by including sensitive data in traces. Affected: IBM MQ Appliance 9.1.4 CD. Root cause: information disclosure via trace data. Impact: partial confidentiality loss; no integrity/availabilit...
CVE-2020-4498
IBM MQ Appliance 9.1 LTS and 9.1 CD are affected by CVE-2020-4498, an information-disclosure vulnerability caused by inclusion of data in trace files. A local privileged user can obtain highly sensitive information from trace output. Remediation: upgrade IBM MQ Appliance to 9.1 LTS with fixpack 9...
Security Bulletin: IBM MQ Appliance is vulnerable to a buffer overflow vulnerability (CVE-2020-4465)
Summary IBM MQ Appliance has resolved a buffer overflow vulnerability. Vulnerability Details CVEID: CVE-2020-4465 DESCRIPTION: IBM MQ, IBM MQ Appliance, and IBM MQ for HPE NonStop are vulnerable to a buffer overflow vulnerability due to an error within the channel processing code. A remote attack...
Free MP3 CD Ripper 2.8 - Stack Buffer Overflow (SEH + Egghunter) Exploit
Exploit Title: Free MP3 CD Ripper 2.8 - Stack Buffer Overflow SEH + Egghunter Exploit Author: Eduard Palisek Vendor Homepage: https://www.cleanersoft.com Software Link: https://www.cleanersoft.com/download/FMCRSetup.exe Version: 2.8 Build 20140611 Tested on: Windows XP, Professional, Version 2002...
IBM MQ Appliance Information Disclosure Vulnerability
The IBM MQ Appliance is an all-in-one appliance for rapid deployment of enterprise-class messaging middleware from IBM USA. An information disclosure vulnerability exists in IBM MQ Appliance version 9.1 LTS and version 9.1 CD. A local attacker could exploit this vulnerability to obtain highly...
Security Bulletin: IBM Connect:Direct for UNIX is Vulnerable to a Privilege Escalation Attack via its C/C++ API
Summary IBM Sterling Connect:Direct for UNIX could allow a user who is authorized for limited Connect:Direct privileges to attack through a custom application written using the Connect:Direct for UNIX C/C++ API by replacing the system implementation of getuid with a malicious implementation and...
Security Bulletin: Multiple Security Vulnerabilities in IBM MQ Affect IBM Sterling B2B Integrator
Summary IBM Sterilng B2B Integrator has addressed multiple security vulnerabilities in IBM MQ Vulnerability Details CVEID: CVE-2019-4619 DESCRIPTION: IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker to obtain sensitive information by inclusion o...
Security Bulletin: IBM MQ Appliance is affected by an information disclosure vulnerability (CVE-2018-20852)
Summary IBM MQ Appliance has resolved an information disclosure vulnerability. Vulnerability Details CVEID: CVE-2018-20852 DESCRIPTION: Python could allow a remote attacker to obtain sensitive information, caused by the failure to correctly validate the domain by...
Security Bulletin: IBM MQ Appliance is affected by a denial of service vulnerability (CVE-2019-13232)
Summary IBM MQ Appliance has addressed the following denial of service vulnerability. Vulnerability Details CVEID: CVE-2019-13232 DESCRIPTION: Info-ZIP UnZip is vulnerable to a denial of service, caused by mishandling the overlapping of files inside a ZIP container. By persuading a victim to open...
Security Bulletin: IBM MQ Appliance is affected by a buffer overflow vulnerability (CVE-2015-2716)
Summary IBM MQ Appliance has resolved a buffer overflow vulnerability. Vulnerability Details CVEID: CVE-2015-2716 DESCRIPTION: Expat, as used in Mozilla Firefox and Thunderbird, is vulnerable to a buffer overflow, caused by improper bounds checking by the XML parser. By persuading a victim to ope...
Security Bulletin: IBM MQ Appliance affected by an OpenSSL vulnerability (CVE-2019-1551)
Summary IBM MQ Appliance has addressed the following OpenSSL vulnerability. Vulnerability Details CVEID: CVE-2019-1551 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an overflow in the x6464 Montgomery squaring procedure used in exponentiation with...
SUSE SLES12 Security Update : systemd (SUSE-SU-2020:1842-1)
This update for systemd fixes the following issues : CVE-2019-20386: Fixed a memory leak when executing the udevadm trigger command bsc1161436. Renamed the persistent link for ATA devices bsc1164538 shared/install: try harder to find enablement symlinks when disabling a unit bsc1157315 tmpfiles:...
