CVE-2020-25680

A flaw was found in JBCS httpd in version 2.4.37 SP3, where it uses a back-end worker SSL certificate with the keystore file's ID is 'unknown'. The validation of the certificate whether CN and hostname are matching stopped working and allow connecting to the back-end work. The highest threat from...

CVE-2020-25680

CVE-2020-25680 is a vulnerability in JBoss Core Services Apache HTTP Server (JBCS httpd) affecting the 2.4.37 line (notably SP3 in the CVE entry; RHSA-2020:4384 references SP5). The issue allows connecting to a backend worker via SSL when the backend keystore file’s ID is 'unknown', due to broken...

hibernate-core: SQL injection vulnerability when both hibernate.use_sql_comments and JPQL String literals are used

A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized...

CVE-2020-28052

A flaw was found in bouncycastle. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password allowing incorrect passwords to indicate they were matching with previously hashed ones that were different. The highest threat from this vulnerability is to data...

PT-2021-4078 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 13.5 through 13.9.7 Description: The issue is related to improper permission checks in GitLab, which could allow an attacker to change the timestamp for issue creation or update. This may impact the integrity of the data...

PT-2021-4088 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 13.10 and later Description: The issue is related to a stored XSS in the blob viewer of notebooks, which can be exploited by a remote attacker to impact data integrity. This is due to the lack of protection measures for the we...

PT-2021-4086 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 12.8 through 13.10.4 GitLab CE/EE versions 13.11 through 13.11.4 GitLab CE/EE versions 13.12 through 13.12.1 Description: The issue is related to errors in the x509 certificate authentication procedure, which could be...

CVE-2020-28282

A flaw was found in nodejs-getobject. The set function does not check for the type of object before assigning value to the property allowing an attacker to create a non-existent property or allow the manipulation of the property which could lead to a denial of service or a remote code execution...

CVE-2020-35509

A flaw was found in keycloak. An expired certificate would be accepted by the direct-grant authenticator because of missing time stamp validations. The highest threat from this vulnerability is to data confidentiality and integrity...

MTN Group: Blind SQL Injection

hello dear support I have found Blind SQL Injection on https://futexpert.mtngbissau.com/signin/ parameters injectable phonenumber=0&pin=1&submit=Continuar via post URL:https://futexpert.mtngbissau.com/signin/ Post: email=0 my payload :...

UBUNTU-CVE-2020-36328

A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

UBUNTU-CVE-2020-36329

A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

The vulnerability of the KVM GET_EMULATED_CPUID request in Linux kernel, related to the operation exceeding the data buffer’s permissible limits, allows an attacker to compromise data integrity and cause service failures. [source-iocs-preserved const=KVM_GET_EMULATED_CPUID]

The vulnerability of the KVM GETEMULATEDCPUID function in Linux operating systems is related to the operation exceeding the permissible data buffer limits. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures. source-iocs-preserved...

CVE-2020-35728

A flaw was found in jackson-databind. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Mitigation The following conditions are needed for an exploit, w...

CVE-2020-13482

A flaw was found in rubygem-em-http-request. The eventmachine library does not verify the hostname in a TLS server certificate which can allow an attacker to perform a man-in-the-middle attack. The highest threat from this vulnerability is to data confidentiality and integrity. Mitigation Red Hat...

The vulnerability of the X-server fly-dm, related to the bypassing of authentication due to a fundamental error, allows attackers to gain access to protected information, compromise its integrity, and cause service failures.

The vulnerability of the X-server fly-dm involves bypassing authentication due to a fundamental flaw. Exploiting this vulnerability allows an attacker who operates remotely to gain access to protected information, compromise its integrity, and cause service failures...

The vulnerability of the Istio network software, related to authentication errors, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Istio network software is related to authentication errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the llcp_sock_create function in the net/nfc/llcp_sock.c module of the AF_NFC module in the Linux operating system, related to default access rights settings, allows a attacker to compromise data integrity.

The vulnerability of the llcpsockcreate function in the net/nfc/llcpsock.c module of the AFNFC module in the Linux operating system is related to a lack of mechanisms for standard permissions. Exploiting this vulnerability could allow an attacker to compromise data integrity...

Sql injection

In S+ Operations and S+ Historian, a successful SQL injection exploit can read sensitive data from the database, modify database data Insert/Update/Delete, execute administration operations on the database such as shutdown the DBMS, recover the content of a given file present on the DBMS file...

CVE-2020-24673

CVE-2020-24673 affects S+ Operations and S+ Historian. The vulnerability is a SQL injection that can allow an attacker to read sensitive data, modify data (Insert/Update/Delete), perform database administration operations (e.g., shutdown the DBMS), recover files from the DBMS file system, and pot...