Design/Logic Flaw

In MISP 2.4.134, XSS exists in the template element index view because the id parameter is mishandled...

CVE-2020-28947: Improper Neutralization of Input During Web Page Generation

In MISP 2.4.134, XSS exists in the template element index view because the id parameter is mishandled...

PT-2020-17069

Name of the Vulnerable Software and Affected Versions MISP version 2.4.134 Description The issue exists in the template element index view due to the mishandling of the id parameter, leading to a cross-site scripting XSS problem. Recommendations For MISP version 2.4.134, consider restricting acce...

CVE-2020-8583

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an attacker to discover sensitive information by intercepting its transmission within an https session...

CVE-2020-8582

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an authenticated user to view sensitive information...

CVE-2020-8582

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an authenticated user to view sensitive information...

CVE-2020-8583

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an attacker to discover sensitive information by intercepting its transmission within an https session...

Information disclosure

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an authenticated user to view sensitive information...

CVE-2020-8583

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an attacker to discover sensitive information by intercepting its transmission within an https session...

CVE-2020-8582

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an authenticated user to view sensitive information...

CVE-2020-8582

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an authenticated user to view sensitive information...

CVE-2020-8582

CVE-2020-8582 affects Element Software before 12.2 and HCI before 1.8P1. The vulnerability is an information disclosure requiring authentication, enabling an authenticated user to view sensitive information. No specific technical details, CVE root cause, affected components, exploit path, or miti...

CVE-2020-8583

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an attacker to discover sensitive information by intercepting its transmission within an https session...

CVE-2020-8583

CVE-2020-8583 affects Element Software before 12.2 and HCI before 1.8P1. The vulnerability allows an attacker to discover sensitive information by intercepting data in an HTTPS session. In the provided documents, the affected versions and the nature of the exposure are stated, with high-impact co...

CVE-2020-8582: Undefined Security Weakness

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an authenticated user to view sensitive information...

CVE-2020-8583: Undefined Security Weakness

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an attacker to discover sensitive information by intercepting its transmission within an https session...

CVE-2020-6156: Heap-based Buffer Overflow

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. To trigger this vulnerability, the victim needs to open an attacker-provided malformed file in an instance USDC file format path element token index...

PT-2020-20223

Name of the Vulnerable Software and Affected Versions Element Software versions prior to 12.2 HCI versions prior to 1.8P1 Description The issue allows an authenticated user to view sensitive information. Recommendations For Element Software versions prior to 12.2, update to version 12.2 or later...

PT-2020-20224

Name of the Vulnerable Software and Affected Versions Element Software versions prior to 12.2 HCI versions prior to 1.8P1 Description The issue allows an attacker to discover sensitive information by intercepting its transmission within an https session. Recommendations For Element Software...

Rocket.Chat: CSS Injection in Message Avatar

The custom message avatars in the Meteor.method "sendMessage" can contain inline CSS that influences the resulting HTML element rendering. Escaping the input with "none;" allows further CSS to be applied to the elements inline styles, without requiring certain characters such as whitespace...