3039 matches found
CVE-2020-2191
Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and earlier does not check permissions on API endpoints that allow adding and removing agent labels...
CVE-2020-2192
A cross-site request forgery vulnerability in Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and earlier allows attackers to add or remove agent labels...
D-Link DSP-W215 Information Disclosure Vulnerability (CNVD-2020-33174)
The D-Link DSP-W215 is a smart plug product from Taiwan, China-based AUO D-Link. A security vulnerability exists in D-Link DSP-W215 version 1.26b03. An attacker can exploit the vulnerability to cause information disclosure...
xt:Commerce 5.4.1 / 6.2.1 / 6.2.2 Improper Access Control Vulnerability
xt:Commerce version 5.4.1, 6.2.1, and 6.2.2 suffer from an improper access control vulnerability. A logged-in customer can create and alter addresses. These addresses are referenced by incrementing IDs. On saving an address, an attacker could change the ID of the address to write the data to. If...
kernel: use-after-free in function __mdiobus_register() in drivers/net/phy/mdio_bus.c
A use-after-free flaw was found in the Linux kernel's MDIO section of the network management subsystem. An attacker who is able to hot-plug a network device can trigger the mdiobusregister function in drivers/net/phy/mdiobus.c, which can cause a use-after-free condition causing a memory corruptio...
kernel: use-after-free in function __mdiobus_register() in drivers/net/phy/mdio_bus.c
A use-after-free flaw was found in the Linux kernel's MDIO section of the network management subsystem. An attacker who is able to hot-plug a network device can trigger the mdiobusregister function in drivers/net/phy/mdiobus.c, which can cause a use-after-free condition causing a memory corruptio...
Foxit PhantomPDF U3DBrowser U3D file parsing out-of-bounds read vulnerability (CNVD-2020-24457)
Foxit PhantomPDF is China's Foxit Foxit a PDF document reader.Foxit 3D Plugin is China's Foxit Foxit a use in the PDF document reader in the 3D plug-in. A security vulnerability exists in Foxit PhantomPDF when processing U3D objects in PDF files. The vulnerability stems from the program failing t...
Out-of-bounds read vulnerability in ve*** data parsing in Foxit PDF Reader U3D plugin
Foxit PDF Reader is an e-book reader. Foxit PDF Reader U3D plug-in ve data parsing there is an out-of-bounds read vulnerability, an attacker can be constructed through the construction of a special PDF file to take advantage of the vulnerability in the current application context to execute code...
The vulnerability of the Server:Audit Plug-in component of the MySQL database management system allows a perpetrator to gain access to read data or modify data.
The vulnerability of the Server:Audit Plug-in component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain read access to data or modify data using specially crafted network...
Same-Origin Policy Bypass
firefox is vulnerable to Same-Origin policy bypass. A flaw was found in the way Firefox handled frame objects with certain names. An attacker could use this flaw to cause a plug-in to grant its content access to another site or the local file system, violating the same-origin policy...
Arbitrary Code Execution
gimp is vulnerable to arbitrary code execution. An integer overflow flaw, leading to a heap-based buffer overflow, was found in the GIMP's Microsoft Windows Bitmap BMP and Personal Computer eXchange PCX image file plug-ins. An attacker could create a specially-crafted BMP or PCX image file that,...
Cross-site Request Forgery (CSRF)
firefox is vulnerable to cross-site request forgery. The vulnerability exists as a flaw was found in the way Firefox handled plug-ins that perform HTTP requests. If a plug-in performed an HTTP request, and the server sent a 307 redirect response, the plug-in was not notified, and the HTTP request...
Arbitrary Code Execution
spice-xpi is vulnerable to arbitrary code execution. The vulnerability exists as an uninitialized pointer use flaw was found in the SPICE Firefox plug-in. If a user were tricked into visiting a malicious web page with Firefox while the SPICE plug-in was enabled, it could cause Firefox to crash or...
Authorization Bypass
Red Hat Enterprise MRG is vulnerable to authorization bypass. The Management Console Installation Guide for Red Hat Enterprise MRG 1.3 instructed administrators to configure Condor to allow the MRG Management Console cumin to submit jobs on behalf of a user. This configuration facilitated a trust...
Man-in-the-middle
The Simple Protocol for Independent Computing Environments SPICE is vulnerable to Man-in-the-middle. A race condition was found in the way the SPICE Mozilla Firefox plug-in and the SPICE client communicated. A local attacker could use this flaw to trick the plug-in and the SPICE client into...
Access Control Bypass
dovecot is vulnerable to access control bypass. A flaw was found in Dovecot's ACL plug-in. The ACL plug-in treated negative access rights as positive rights, which could allow an attacker to bypass intended access restrictions...
Privilege Escalation
dovecot is vulnerable to privilege escalation. A flaw was found in the Dovecot ACL plug-in. User with only insert permissions for a mailbox could use the "COPY" and "APPEND" commands to set additional message flags...
Castle Rock Computing SNMPc Online Cross-Site Request Forgery Vulnerability
Castle Rock Computing SNMPc Online is an advanced reporting plug-in for SNMPc Enterprise Network Manager from Castle Rock Computing, USA. A cross-site request forgery vulnerability exists in Castle Rock Computing SNMPc Online. The vulnerability stems from a WEB application that does not adequatel...
Microstrategy Web Code Issue Vulnerability (CNVD-2020-23179)
Microstrategy Web is a set of U.S. Microstrategy's enterprise data analysis platform. The platform features data discovery, data visualization and report generation. A security vulnerability exists in the Upload Visualization plug-in for the administrator panel in Microstrategy Web version 10.4. ...
