2311 matches found
TotoLink A702r: Access control error vulnerability
The Totolink A702r is a router device from the Chinese company Totolink. The Totolink A702r V1.0.0-B20161227.1023 suffers from an access control error vulnerability that allows an attacker to access the icon directory via the GET parameter. No detailed vulnerability details are provided at this...
fly-wm Memory Leak Confidential Data
The vulnerability of the fly-wm window manager is related to the improper release of memory after moving the icon to a new location. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
brython-server (>=2.0.3, <=2.2.1), cimage (>=1.4.1, <=1.4.2) +7 more potentially affected by CVE-2020-35653 via pillow (2.9.0)
pillow PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - brython-server =2.0.3, =1.4.1, =0.0.1, =1.0.7, =0.6.1, =0.1.1, =0.5.28, =0.0.1.dev0, =1.0.0b1 Source cves: CVE-2020-35653 Source advisory:...
CVE-2020-9963
The issue was addressed with improved handling of icon caches. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious app may be able to determine the existence of files on the computer...
CVE-2020-9963
The issue was addressed with improved handling of icon caches. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious app may be able to determine the existence of files on the computer...
CVE-2020-9963
The issue was addressed with improved handling of icon caches. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious app may be able to determine the existence of files on the computer...
Design/Logic Flaw
The issue was addressed with improved handling of icon caches. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious app may be able to determine the existence of files on the computer...
CVE-2020-9963
The issue was addressed with improved handling of icon caches. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious app may be able to determine the existence of files on the computer...
CVE-2020-9963
CVE-2020-9963 is fixed in macOS Big Sur 11.0.1, iOS 14.0, and iPadOS 14.0. The issue arises from icon-cache handling, where a malicious app could determine whether files exist on the host. The RedHat/Apple documentation attributes the fix to improved handling of icon caches. Practical impact is i...
CVE-2020-9963: Undefined Security Weakness
The issue was addressed with improved handling of icon caches. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious app may be able to determine the existence of files on the computer...
Fedora 31 : seamonkey (2020-fd5918d946)
Additional fixes for AV1 codec and svg icon. ---- Update to 2.53.5 AV1 media codec now supported. Some fixes and improvements. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically...
Fedora 32 : seamonkey (2020-396a3dfb1f)
Additional fixes for AV1 codec and svg icon. ---- Update to 2.53.5 AV1 media codec now supported. Some fixes and improvements. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically...
PT-2020-20900
Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.0.1 iOS versions prior to 14.0 iPadOS versions prior to 14.0 Description The issue was addressed with improved handling of icon caches. A malicious app may be able to determine the existence of files on the...
icon-favor.ru Cross Site Scripting vulnerability OBB-1487643
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
freerdp: out-of-bounds read in update_read_icon_info function
In FreeRDP greater than 1.1 and before 2.0.0, there is an out-of-bounds read in updatereadiconinfo. It allows reading a attacker-defined amount of client memory 32bit unsigned - 4GB to an intermediate buffer. This can be used to crash the client or store information for later retrieval. This has...
iconeventcatering.com.au Cross Site Scripting vulnerability OBB-1386630
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CloudBees Jenkins Cross-Site Scripting Vulnerability (CNVD-2020-52608)
CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . Jenkins Custom Job Icon plugi...
CVE-2020-2264
Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...
CVE-2020-2264
Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...
Cross site scripting
Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...