6410 matches found
Google Patches 11 Critical RCE Android Vulnerabilities
Remote code-execution RCE vulnerabilities dominated Google’s December Android Security Bulletin. The flaws are part of a total of 53 unique bugs patched by the Android security team, with a total number of 11 critical bugs – six of which are RCE flaws tied to the operating system’s Media Framewor...
Pixel / Nexus Security Bulletin—December 2018Stay organized with collectionsSave and categorize content based on your preferences.
The Pixel/Nexus Security Bulletin contains details of security vulnerabilities and functional improvements affecting supported Google Pixel and Nexus devices Google devices. For Google devices, security patch levels of 2018-12-05 or later address all issues in this bulletin and all issues in the...
Sonatype Nexus Repository Manager Cross-Site Scripting Vulnerability (CNVD-2019-07005)
Sonatype Nexus Repository Manager aka NXRM is a maven repository manager. A cross-site scripting vulnerability exists in Sonatype NXRM versions prior to 3.14. A remote attacker can exploit this vulnerability to execute arbitrary JavaScript code in a user's browser...
Sonatype Nexus Repository Manager Improper Access Control Vulnerability
Sonatype Nexus Repository Manager aka NXRM is a maven repository manager. A security vulnerability exists in Sonatype NXRM versions prior to 3.14, which is caused by the program failing to enforce proper access control. The vulnerability can be exploited to gain access to other hosts and open por...
Sonatype Nexus Repository Manager Java Code Execution Vulnerability
Sonatype Nexus Repository Manager aka NXRM is a maven repository manager. A security vulnerability exists in Sonatype NXRM versions prior to 3.14. An attacker can exploit the vulnerability to execute code on the server...
Cross site scripting
Sonatype Nexus Repository Manager before 3.14 allows XSS...
Design/Logic Flaw
Sonatype Nexus Repository Manager before 3.14 has Incorrect Access Control...
CVE-2018-16619
Sonatype Nexus Repository Manager before 3.14 allows XSS...
CVE-2018-16621
Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection...
Design/Logic Flaw
Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection...
CVE-2018-16619
Sonatype Nexus Repository Manager before 3.14 allows XSS...
CVE-2018-16621
Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection...
CVE-2018-16620
Sonatype Nexus Repository Manager before 3.14 has Incorrect Access Control...
CVE-2018-16620
Sonatype Nexus Repository Manager before 3.14 has Incorrect Access Control...
CVE-2018-16620
Sonatype Nexus Repository Manager before 3.14 has Incorrect Access Control...
CVE-2018-16620
The CVE-2018-16620 entry concerns Sonatype Nexus Repository Manager prior to 3.14, with Improper/Incorrect Access Control. Multiple connected sources confirm the issue arises from failing to enforce access controls, enabling a misbehavior that could let an attacker reach other hosts or open ports...
CVE-2018-16621
Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection...
CVE-2018-16619
CVE-2018-16619 affects Sonatype Nexus Repository Manager prior to version 3.14 and is a cross-site scripting (XSS) vulnerability. The issue allows an attacker to execute arbitrary JavaScript in a user’s browser, with exploitation described as remote and requiring user interaction in some sources....
CVE-2018-16621
CVE-2018-16621 affects Sonatype Nexus Repository Manager prior to version 3.14, where Java Expression Language Injection is possible. The root cause is insecure EL handling in the repository manager, enabling injection that can lead to server-side behavior manipulation. In the public records, the...