CVE-2020-7370

User Interface UI Misrepresentation of Critical Information vulnerability in the address bar of Danyil Vasilenko's Bolt Browser allows an attacker to obfuscate the true source of data as presented in the browser. This issue affects the Bolt Browser version 1.4 and prior versions...

PT-2020-15262 · Palo Alto Networks · Pan-Os

Name of the Vulnerable Software and Affected Versions: PAN-OS versions prior to 9.0.10 PAN-OS versions prior to 9.1.4 PAN-OS versions prior to 10.0.1 Description: The issue is an OS Command Injection vulnerability in the management interface, allowing authenticated administrators to execute...

PT-2020-8914 · Pullit · Pullit

Name of the Vulnerable Software and Affected Versions: pullit versions prior to 1.4.0 Description: The issue allows OS Command Injection because eval is used on an attacker-supplied Git branch name. The package does not validate input on git branch names and concatenates it to an exec call,...

File Deletion Vulnerability in daozicms V1.4

Daozicms Enterprise Building System is a cms enterprise building system developed by Thinkphp6.0.2+layui-v2.3.0+Mysql5.7. A file deletion vulnerability exists in daozicms V1.4, which can be exploited by attackers to cause a denial of service attack...

ihatemoney Resource Management Error Vulnerability

ihatemoney is a web-based shared budget management application. A resource management error vulnerability exists in ihatemoney pypi version 4.1.4 and prior versions, which arises from a mismanagement of system resources e.g., memory, disk space, files, etc. on a networked system or product, and c...

CVE-2020-14574

Vulnerability in the Oracle Communications Interactive Session Recorder product of Oracle Communications Applications component: FACE. Supported versions that are affected are 6.1-6.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...

ELOG Electronic Logbook Code Issue Vulnerability

ELOG is a web application written in C for creating personal and general purpose logs. A code issue vulnerability exists in the handling of HTTP parameters in ELOG Electronic Logbook version 3.1.4-283534d, which can be exploited by remote attackers to cause a denial of service via a specially...

Open Network Operating System (ONOS) Code Unexpected Execution Vulnerability (CNVD-2020-14217)

Open Network Operating System ONOS is a carrier-grade SDN network operating system for service providers and enterprise backbones. A code unintended execution vulnerability exists in Open Network Operating System ONOS 1.14. The vulnerability stems from a host event listener in the access control...

Dream cms v1.4 (lmxcms) background exists arbitrary file deletion vulnerability

Dream Cms, hereinafter referred to as "lmxcms", is a simple and practical website management system cms developed by "10 years" screen name, completely free and open source. Dream cms v1.4 lmxcms background arbitrary file deletion vulnerability, attackers can exploit the vulnerability of arbitrar...

WordPress cysteme-finder plugin code issue vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A code issue vulnerability exists in the WordPress cysteme-finder plugin prior to version 1.4, which stems fro...

Code Execution Vulnerability in LmxCMS V1.4

Dream cms lmxcms is developed using php language and mysql database, and adopts the mainstream MVC design mode. A code execution vulnerability exists in LmxCMS V1.4, which can be exploited by attackers to gain server privileges...

Joruri Mail Input Validation Error Vulnerability

Joruri Mail is a set of IMAP e-mail client software written using Ruby/Rails . An input validation error vulnerability exists in Joruri Mail 2.1.4 and prior versions, which arises from a network system or product that does not properly validate incoming data and can be exploited by a remote...

UBUNTU-CVE-2019-0227

A Server Side Request Forgery SSRF vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2...

FlatCore Arbitrary File Upload Vulnerability

flatCore is a lightweight content management system CMS based on PHP and SQLite. A security vulnerability exists in the acp/acp.php file in flatCore version 1.4.7. No details of the vulnerability are provided at this time...

PrinterOn Enterprise Cross-Site Scripting Vulnerability

PrinterOn Enterprise is a secure cloud printing solution from PrinterOn Canada. The solution supports printing from laptops, desktops and mobile devices connected to printers. A cross-site scripting vulnerability exists in PrinterOn Enterprise version 4.1.4, which stems from a lack of proper...

PT-2019-6082

Name of the Vulnerable Software and Affected Versions iOS versions prior to 12.1.4 Description A memory corruption issue was addressed with improved input validation, allowing an application to potentially execute arbitrary code with kernel privileges. The issue is related to a buffer overflow in...

Code Execution Vulnerability in Ac***.cl***.php in LmxCMS V1.4 Backend

Dream Cms, hereinafter referred to as "lmxcms", is a simple and practical website management system cms developed by "10 years" screen name. A code execution vulnerability exists in Ac.cl.php in the backend of LmxCMS V1.4. An attacker can exploit the vulnerability to launch a remote command...

ARM Trusted Firmware Information Disclosure Vulnerability

ARM Trusted Firmware is an implementation of multiple ARM interface standards. An information disclosure vulnerability exists in ARM Trusted Firmware version 1.4 and earlier, which stems from a program's failure to initialize or save/store the PMCREL0 register and can be exploited by an attacker ...

UBUNTU-CVE-2018-8040

Pages that are rendered using the ESI plugin can have access to the cookie header when the plugin is configured not to allow access. This affects Apache Traffic Server ATS versions 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x should upgrade to 6.2.3 or later versions...

GNU Libtasn1 Denial of Service Vulnerability

GNU Libtasn1 is an ASN.1 architecture management library for use in GnuTLS, the secure communications library that implements the SSL, TLS and DTLS protocols, developed by software developer Fabio Fiorina. A denial of service vulnerability exists in GNU Libtasn version 1-4.13. An attacker can...