CVE-2020-19924

In Boostnote 0.12.1, exporting to PDF contains opportunities for XSS attacks...

CVE-2020-19924

In Boostnote 0.12.1, exporting to PDF contains opportunities for XSS attacks...

Cross site scripting

In Boostnote 0.12.1, exporting to PDF contains opportunities for XSS attacks...

CVE-2020-19924

In Boostnote 0.12.1, exporting to PDF contains opportunities for XSS attacks...

CVE-2020-19924

Boostnote 0.12.1 exports to PDF and exposes a cross-site scripting (XSS) vulnerability. Primary sources (CVE entries and mirrors in Red Hat/CNVD/OSV/CVE catalogs) consistently describe an XSS risk arising during PDF export, but do not provide concrete exploit vectors, affected subcomponents, or a...

EulerOS 2.0 SP8 : kernel (EulerOS-SA-2021-1879)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user with root or CAPNETADMIN when...

BoostIO Boostnote 跨站脚本漏洞

BoostIO Boostnote is a Markdown editor that supports multiple platforms. Boostnote 0.12.1 suffers from a cross-site scripting vulnerability that stems from an export to PDF containing an opportunity for XSS attacks. No detailed vulnerability details are provided at this time...

Moodle 信息泄露漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. Moodle suffers from an information disclosure vulnerability that stems from the application exporting too much data. A remote attacker...

CVE-2020-27150

In multiple versions of NPort IA5000A Series, the result of exporting a device’s configuration contains the passwords of all users on the system and other sensitive data in the original form if “Pre-shared key” doesn’t set...

Design/Logic Flaw

In multiple versions of NPort IA5000A Series, the result of exporting a device’s configuration contains the passwords of all users on the system and other sensitive data in the original form if “Pre-shared key” doesn’t set...

CVE-2021-30183

Cleartext storage of sensitive information in multiple versions of Octopus Server where in certain situations when running import or export processes, the password used to encrypt and decrypt sensitive values would be written to the logs in plaintext...

Code injection

Cleartext storage of sensitive information in multiple versions of Octopus Server where in certain situations when running import or export processes, the password used to encrypt and decrypt sensitive values would be written to the logs in plaintext...

CVE-2021-30183

Cleartext storage of sensitive information in multiple versions of Octopus Server where in certain situations when running import or export processes, the password used to encrypt and decrypt sensitive values would be written to the logs in plaintext...

CVE-2020-27150

CVE-2020-27150 affects multiple versions of Moxa NPort IA5000A Series industrial device servers. The vulnerability arises when exporting a device’s configuration, which can reveal passwords for all users and other sensitive data in their original form if a Pre-shared key has not been set. The con...

Octopus Server 安全漏洞

Octopus Deploy is an automation tool for .NET, Java, and other application development and deployment from Octopus Deploy Australia. A security vulnerability exists in Octopus Server that stems from storing sensitive information in plaintext in multiple versions of Octopus Server, where in some...

JetBrains YouTrack Access Control Improperly Implemented Vulnerability

YouTrack is a keyboard-based issue and project tracking tool from the Czech company JetBrains, primarily used for tracking tasks and defect correction arrangements during development. JetBrains YouTrack versions prior to 2020.6.6600 are vulnerable to an improper implementation of access control...

VAST - Visibility Across Space And Time

The network telemetry engine for data-driven security investigations. Getting Started — Installation — Documentation — Development — Changelog — License and Scientific Use Chat with us on Gitter, or join us on Matrix at tenzirvast:gitter.im. Key Features High-Throughput Ingestion : import numerou...

CVE-2021-31902

In JetBrains YouTrack before 2020.6.6600, access control during the exporting of issues was implemented improperly...

CVE-2021-31902

In JetBrains YouTrack before 2020.6.6600, access control during the exporting of issues was implemented improperly...

CVE-2021-31902

Summary of CVE-2021-31902: JetBrains YouTrack versions prior to 2020.6.6600 are affected by improper access control during the exporting of issues. The Red Hat/CNVD entries and the JetBrains Security Bulletin Q1 2021 corroborate that the vulnerability is tied to YouTrack and was addressed by a fi...