ALPINE-CVE-2020-0256

In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2020-3760 · Microsoft · Iis +2

Name of the Vulnerable Software and Affected Versions: ASP.NET or .NET web applications affected versions not specified Description: An elevation of privilege issue exists due to improper access control to cached files in ASP.NET or .NET web applications running on IIS. This could allow an attack...

PT-2020-14784 · Ripe Ncc · Ripe Ncc Rpki Validator

Name of the Vulnerable Software and Affected Versions: RIPE NCC RPKI Validator versions 3.x through 3.1-2020.07.06.14.28 Description: An issue was discovered in the X509-based RPKI certificate-tree validation procedure, where missing validation checks on CRL presence or CRL staleness allow remote...

@bara/barn (>=2.2.0, <=2.5.0), @ezs/istex (1.4.7) +25 more potentially affected by CVE-2020-8116 via dot-prop (>=5.0.0, <=5.1.0)

dot-prop NPM version =5.0.0, =2.2.0, =1.1.3, =2.1.9, =12.0.0, =0.0.0, =1.2.5, =1.0.0-rc.2, =1.0.0, =0.4.2, =0.1.6, =0.0.31, =2.2.0, =1.3.0, =3.1.1 and more Source cves: CVE-2020-8116 Source advisory: OSV:GHSA-FF7X-QRG7-QGGM...

GHSA-FF7X-QRG7-QGGM dot-prop Prototype Pollution vulnerability

Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects...

@badgeup/badgeup-ionic-client (>=1.0.1, <=1.0.3), @codedungeon/code-assistant (>=0.0.1, <=0.0.4-dev.53) +42 more potentially affected by CVE-2020-8116 via dot-prop (>=4.0.0, <=4.2.0)

dot-prop NPM version =4.0.0, =1.0.1, =0.0.1, =0.0.1-dev.9, =0.0.3, =0.0.4, =1.1.0, =1.0.0-alpha.5, =0.10.1, =3.0.0, =1.0.0-beta.1, =0.1.12, =1.0.0, =1.0.2 - falcor-array 0.0.1 - flipcache 0.0.1 and more Source cves: CVE-2020-8116 Source advisory: OSV:GHSA-FF7X-QRG7-QGGM...

dot-prop Prototype Pollution vulnerability

Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects...

SQL Injection Vulnerability in Nantong Dot Cool Network Technology Co.

Founded in 2010, Nantong Dot Cool Network Technology Co., Ltd. mainly provides industry website construction and solutions. There is a SQL injection vulnerability in Nantong Dot Cool Network Technology Co., Ltd.'s Beehive website builder system, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in Nantong Dot Cool Network Technology Co.

Nantong Dot Cool Networks Technology Co. Since its inception, the company has provided many groups of enterprises and listed companies with perfect industry website construction solutions. There is a SQL injection vulnerability in Nantong Dot Cool Network Technology Co., Ltd's Beehive website...

July 21, 2020-KB4567327 Cumulative Update Preview for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10 Version 1809 and Windows Server 2019

None None...

VulnCheck KEV: CVE-2018-20685

In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side...

ftp.dot.state.ak.us Improper Access Control vulnerability OBB-1216143

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

The vulnerability of the OpenOffice office suite arises from incorrect restrictions on path names to restricted directories. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenOffice office suite is related to a recompilation error through “.. two dots” in files where the XSLT JAR filter is active. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

newyorkdotcom.com Cross Site Scripting vulnerability OBB-1198529

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

cxf: reflected XSS in the services listing page

By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting XSS attack, which allows a malicious actor to inject javascript into the web page. Please note that the attack exploit...

cxf: reflected XSS in the services listing page

By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting XSS attack, which allows a malicious actor to inject javascript into the web page. Please note that the attack exploit...

cxf: reflected XSS in the services listing page

By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting XSS attack, which allows a malicious actor to inject javascript into the web page. Please note that the attack exploit...

Vulnerability of .NET Core and Microsoft .NET Framework software platforms, related to insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of.NET Core and Microsoft.NET Framework software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

CVE-2020-1066

An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level.To exploit the vulnerability, an attacker would first have to access the local machine, and then run a malicious program.The update addresses the vulnerability by...

cxf: reflected XSS in the services listing page

By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting XSS attack, which allows a malicious actor to inject javascript into the web page. Please note that the attack exploit...