Huawei EulerOS: Security Advisory for nginx (EulerOS-SA-2020-1119)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Vulnerability fixed in Apache Tomcat

A malicious party can exploit the vulnerability to obtain information from the system. The vulnerability was caused because the AJP protocol was incorrectly was implemented incorrectly. A malicious party could possibly read files a malicious request to read files from the webroot directory. The A...

CVE-2011-2498

The Linux kernel from v2.3.36 before v2.6.39 allows local unprivileged users to cause a denial of service memory consumption by triggering creation of PTE pages...

Design/Logic Flaw

The Linux kernel from v2.3.36 before v2.6.39 allows local unprivileged users to cause a denial of service memory consumption by triggering creation of PTE pages...

Google Chrome cross-origin data leakage vulnerability (CNVD-2020-10256)

Chrome is a web browsing tool developed by Google. A cross-origin data leakage vulnerability exists in Google Chrome versions prior to 80.0.3987.87. The vulnerability stems from insufficient policy enforcement in Blink in Chrome. An attacker can exploit the vulnerability to leak cross-origin data...

Google Chrome Integer Overflow Vulnerability (CNVD-2020-10249)

Chrome is a web browsing tool developed by Google. An integer overflow vulnerability exists in JavaScript in versions prior to Google Chrome 80.0.3987.87. An attacker can exploit this vulnerability to cause heap corruption via specially crafted HTML pages...

Google Chrome Cross-Origin Data Leakage Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A cross-origin data leakage vulnerability exists in Google Chrome versions prior to 80.0.3987.87. The vulnerability stems from an improper implementation of CORS in...

Cross site request forgery (csrf)

A CSRF Vulnerability exists in Kemp Load Master before 7.0-18a via unspecified vectors in administrative pages...

CVE-2014-5288

A CSRF Vulnerability exists in Kemp Load Master before 7.0-18a via unspecified vectors in administrative pages...

CVE-2014-5288

Kemp Load Master is affected by a CSRF vulnerability (CVE-2014-5288) in the web administrative interface prior to version 7.0-18a. Public writeups and exploit listings (e.g., 7.1.16 era) describe additional issues (RCE, XSS, DoS) in Kemp Load Master, indicating multiple vulnerabilities around the...

SUSE SLED12 / SLES12 Security Update : systemd (SUSE-SU-2020:0331-1)

This update for systemd fixes the following issues : CVE-2020-1712 bscbsc1162108 Fix a heap use-after-free vulnerability, when asynchronous Polkit queries were performed while handling Dbus messages. A local unprivileged attacker could have abused this flaw to crash systemd services or potentiall...

CVE-2020-4163

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, under specialized conditions, could allow an authenticated user to create a maliciously crafted file name which would be misinterpreted as jsp content and executed. IBM X-Force ID: 174397...

SQL Injection

centreon/centreon is vulnerable to SQL Injection. The vulnerability exists as several values in multiple monitoring pages were not properly validated, allowing an attacker to inject and execute arbitrary SQL statements...

CVE-2020-7911

In JetBrains TeamCity before 2019.2, several user-level pages were vulnerable to XSS...

CVE-2020-7908

In JetBrains TeamCity before 2019.1.5, reverse tabnabbing was possible on several pages...

The vulnerability of the cpia2_remap_buffer function in the Linux operating system allows a hacker to gain access to read and write physical pages in the kernel, thereby enhancing their privileges.

The vulnerability of the cpia2remapbuffer function drivers/media/usb/cpia2/cpia2core.c in the Linux kernel is related to integer overflow. Exploiting this vulnerability can allow an attacker to gain access to read and write operations on physical pages in the kernel, thereby enhancing their...

The vulnerability of the Learner Pages component in Oracle iLearning’s corporate learning management system allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the Learner Pages component in Oracle iLearning’s corporate learning management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP protocol...

CVE-2020-7994

Multiple cross-site scripting XSS vulnerabilities in Dolibarr 10.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 labellibelle parameter to the /htdocs/admin/dict.php?id=3 page; the 2 nameconstname parameter to the /htdocs/admin/const.php?mainmenu=home page; the 3...

CVE-2020-7994

Multiple cross-site scripting XSS vulnerabilities in Dolibarr 10.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 labellibelle parameter to the /htdocs/admin/dict.php?id=3 page; the 2 nameconstname parameter to the /htdocs/admin/const.php?mainmenu=home page; the 3...

PT-2020-19905 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: Dolibarr version 10.0.6 Description: Multiple cross-site scripting XSS vulnerabilities allow remote attackers to inject arbitrary web script or HTML via various parameters to different pages, including the labellibelle parameter to the...