CVE-2020-10728

A flaw was found in automationbroker/apb container in versions up to and including 2.0.4-1. This container grants all users sudoer permissions allowing an unauthorized user with access to the running container the ability to escalate their own privileges. The highest threat from this vulnerabilit...

PT-2020-3604 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.4.1 WordPress versions 5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9.14, 4.8.13, 4.7.17, 4.6.18, 4.5.21, 4.4.22, 4.3.23, 4.2.27, 4.1.30, 4.0.30, 3.9.31, 3.8.33, 3.7.33 Description: A vulnerability in the stats method of...

PT-2020-3600 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.4.1 WordPress versions 5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9.14, 4.8.13, 4.7.17, 4.6.18, 4.5.21, 4.4.22, 4.3.23, 4.2.27, 4.1.30, 4.0.30, 3.9.31, 3.8.33, 3.7.33 Description: A cross-site scripting XSS vulnerability in t...

Unspecified Vulnerability in Oracle Virtualization VM VirtualBox (CNVD-2020-51464 )

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

PT-2020-3605 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.4.1 WordPress versions 5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9.14, 4.8.13, 4.7.17, 4.6.18, 4.5.21, 4.4.22, 4.3.23, 4.2.27, 4.1.30, 4.0.30, 3.9.31, 3.8.33, 3.7.33 Description: The issue is related to the render block core...

The vulnerability of the SyncImageSettings function in the console-based ImageMagick graphics editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SyncImageSettings function MagickCore/image.c in the ImageMagick console-based graphics editor involves the use of an uninitialized value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protecte...

Vulnerability of the function in the Linux kernel’s drivers/net/wireless/rsi/rsi_91x_usb.c, which allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information

The vulnerability of the function in the drivers/net/wireless/rsi/rsi91xusb.c kernel of the Linux operating system is related to a memory reclamation error. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information by...

The vulnerability of the _nc_find_entry function in the ncurses library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ncfindentry function in the ncurses library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the `append_domain` parameter in the Squid proxy server, related to the manipulation of inter-domain requests, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the appenddomain parameter in the Squid proxy server is related to deficiencies in mechanisms for combating cross-site fraud. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to confidential data and compromise its integrity...

jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

jackson-databind: Serialization gadgets in anteros-core

A flaw was found in jackson-databind 2.x. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

jackson-databind: Serialization gadgets in ibatis-sqlmap

A flaw was found in jackson-databind 2.x. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2014-4678

A flaw was found in ansible. The safeeval function does not properly restrict the code subset which allows remote attackers to execute arbitrary code via crafted instructions. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

PT-2020-6916 · Opendmarc +2 · Opendmarc +2

Name of the Vulnerable Software and Affected Versions: OpenDMARC versions 1.3.2 and 1.4.x Description: The issue is related to the incorrect parsing and interpretation of SPF/DKIM authentication results, allowing attacks to inject false information about the domain that originated an e-mail...

The vulnerability of the Omnibox address bar in Google Chrome’s browser, related to bypassing authentication through spamming, allows attackers to compromise data integrity.

The vulnerability of the Omnibox address bar in Google Chrome relates to the bypassing of authentication processes through spamming. Exploiting this vulnerability allows a malicious actor to compromise data integrity by using a specially created HTML page...

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of the PDFium PDF-content processor in the Google Chrome browser involves reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to information and compromise its integrity and accessibility throu...

The vulnerability of Google Chrome’s browser, related to bypassing authentication through spoofing, allows attackers to compromise data integrity.

The vulnerability of Google Chrome relates to bypassing authentication through spamming. Exploiting this vulnerability allows a malicious actor, operating remotely, to compromise data integrity by using a specially created HTML page...

The vulnerability of the Google Chrome browser’s loading mechanism, related to the lack of data validation mechanisms, allows attackers to compromise the integrity of data.

The vulnerability of the Google Chrome browser’s download mechanism is related to the lack of a mechanism for checking entered data. Exploiting this vulnerability allows an attacker to compromise the integrity of data through the created HTML page...

PT-2020-3424 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 81.0.4044.129 Description: The issue is related to a use after free in storage, which could allow a remote attacker who has compromised the renderer process to potentially perform a sandbox escape. This can be...

The vulnerability of Google Chrome’s browser, related to bypassing authentication through spoofing, allows attackers to compromise data integrity.

The vulnerability of Google Chrome relates to bypassing authentication through spamming. Exploiting this vulnerability allows a malicious actor, operating remotely, to compromise data integrity by using a specially created HTML page...