4341 matches found
Unraid Remote Code Execution Vulnerability
Unraid is a set of operating systems used primarily by individuals and small businesses. A security vulnerability exists in Unraid version 6.8.0 and earlier. An attacker could exploit the vulnerability to execute code...
ABB eSOMS Cross-Site Scripting Vulnerability
ABB eSOMS is a plant operations management system from ABB Switzerland. A cross-site scripting vulnerability exists in ABB eSOMS 6.0.2 and prior versions. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerabilit...
ABB eSOMS Information Disclosure Vulnerability (CNVD-2020-17169)
ABB eSOMS is a plant operations management system from ABB Switzerland. An information disclosure vulnerability exists in ABB eSOMS 6.0.3 and prior versions. The vulnerability arises from an error in the configuration, etc. of a networked system or product during operation. An unauthorized attack...
UBUNTU-CVE-2020-6810
After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification that indicates the browser is in fullscreen mode. Combined with spoofing the browser chrome, this could have led to confusing the user about the current origin of the page and...
jenkins: Memory usage graphs accessible to anyone with Overall/Read
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier allowed users with Overall/Read access to view a JVM memory usage chart...
Monstra Access Control Error Vulnerability
Monstra is a lightweight content management system CMS. An access control error vulnerability exists in Monstra 3.0.4 and earlier versions. A remote attacker can exploit this vulnerability to take over arbitrary user accounts via the modified login parameter of the edit URI...
PT-2020-15361 · Jenkins · Jenkins Sonar Quality Gates Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Sonar Quality Gates Plugin versions 1.3.1 and earlier Description: The issue concerns the transmission of configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure...
DEBIAN-CVE-2020-6795
When processing a message that contains multiple S/MIME signatures, a bug in the MIME processing code caused a null pointer dereference, leading to an unexploitable crash. This vulnerability affects Thunderbird 68.5...
ZTE E8820V3 Information Disclosure Vulnerability
The ZTE E8820V3 is a Gigabit Dual Band 1200M with WiFi Smart Router. An information disclosure vulnerability exists in ZTE E8820V3 V3.1.0.1000.4 and earlier versions. An attacker can exploit this vulnerability to obtain the wireless password, which can be used to collect information and attack th...
DNN Path Traversal Vulnerability
DNN also known as DotNetNuke is a set of U.S. DNN by Microsoft support , based on the ASP.NET platform for open source content management system CMS. The system is easy to install , scalable , feature-rich and so on. A path traversal vulnerability exists in DNN 9.4.4 and earlier versions. The...
Yarn path traversal vulnerability
Yarn is an open source package installation, management tools. A path traversal vulnerability exists in Yarn 1.21.1 and earlier versions. The vulnerability stems from a failure of a networked system or product to properly filter special elements in the path of a resource or file. An attacker can...
spacewalk code issue vulnerability
spacewalk is an open source Linux system management solution. A code issue vulnerability exists in Spacewalk 2.9 and prior versions. The vulnerability stems from an improperly designed or implemented code development process for a networked system or product. No detailed vulnerability details are...
Unspecified vulnerability in SilverStripe
SilverStripe is New Zealand SilverStripe company's set of open source programming framework and content management system CMS. A security vulnerability exists in SilverStripe 4.3.3 and earlier versions. An attacker could exploit this vulnerability to cause a denial of service...
CVE-2019-1950
A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, local attacker to gain unauthorized access to an affected device. The vulnerability is due to the existence of default credentials within the default configuration of an affected device. An attacker who has access to ...
CVE-2019-1950 Cisco IOS XE SD-WAN Software Default Credentials Vulnerability
A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, local attacker to gain unauthorized access to an affected device. The vulnerability is due to the existence of default credentials within the default configuration of an affected device. An attacker who has access to ...
GitLab Information Disclosure Vulnerability (CNVD-2020-10496)
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. An information disclosure vulnerability exists in GitLab versions 12.2.2 and earlier. The...
Foxit Reader Out-of-Bounds Write Remote Code Execution Vulnerability (CNVD-2020-10618)
Foxit Reader old name: Foxit PDF Reader is a set of software used to read PDF format files, by Fujian Foxit Software developed by Foxit Reader is a set of free to use the software, the operating system is mainly based on Microsoft Windows, and as long as there is a Win32 implementation of the...
PT-2020-6834 · Foxit · Foxit Pdf Reader +1
Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader and PDF Editor versions 11.2.1.53537 and earlier Description: The issue is related to an out-of-bounds read operation in memory, which can be exploited by opening a specially crafted malicious file or page, allowing a remote...