3008 matches found
Dell EMC ECS Exposes Resource Vulnerability
Dell EMC Elastic Cloud Storage ECS is a suite of scalable, software-defined object storage solutions from Dell, USA. An exposed resource vulnerability exists in Dell EMC ECS versions prior to 3.5, which arises from improper management of system resources e.g., memory, disk space, files, etc. by a...
CVE-2020-23450
Spiceworks Version = 7.5.00107 is affected by XSS. Any name typed on Custom Groups function is vulnerable to stored XSS as they displayed on http://127.0.0.1/inventory/groups/ without output sanitization...
CVE-2020-17465
Dashboards and progressiveProfileForms in ForgeRock Identity Manager before 7.0.0 are vulnerable to stored XSS. The vulnerability affects versions 6.5.0.4, 6.0.0.6...
PT-2020-15764 · Savsoft · Savsoft Quiz
Name of the Vulnerable Software and Affected Versions: Savsoft Quiz versions 5.5 and earlier Description: The issue allows an attacker to inject a malicious payload in the User Registration section. When the admin visits the manage user section from the admin panel, the payload triggers, enabling...
NexusDB Directory Traversal Vulnerability
NexusDB is a scalable and flexible SQL:2003 database engine. A directory traversal vulnerability exists in NexusDB versions prior to 4.50.23. An attacker can read files via . /directory traversal to read files...
Contiki-NG buffer overflow vulnerability (CNVD-2020-49537)
Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. A buffer overflow vulnerability exists in Contiki-NG versions 4.4 through 4.5. The vulnerability stems from a networked system or product performing operations on memory without proper...
Artifex Software Ghostscript Buffer Overflow Vulnerability (CNVD-2020-46252)
Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files as well as print Postscript files on non-PostScrip...
DEBIAN-CVE-2020-16296
A buffer overflow vulnerability in GetNumWrongData in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...
Command Execution Vulnerability in Empire CMS v7.5 Backend
EmpireCMS Empire Content Management System is an open source content management system CMS. A command execution vulnerability exists in the Empire CMS v7.5 backend, which can be exploited by an attacker to gain access to the web server...
PT-2020-14567 · Marvell · Marvell Qconvergeconsole
Name of the Vulnerable Software and Affected Versions: Marvell QConvergeConsole version 5.5.0.64 Description: This issue allows remote attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existing authentication mechanism ca...
OPENSUSE-SU-2020:0953-1 Security update for mozilla-nss
This update for mozilla-nss fixes the following issues: mozilla-nss was updated to version 3.53.1 - CVE-2020-12402: Fixed a potential side channel attack during RSA key generation bsc1173032 - Fixed various FIPS issues in libfreebl3 which were causing segfaults in the test suite of chrony...
Dell EMC Data Protection Advisor Operating System Command Injection Vulnerability
Dell EMC Data Protection Advisor is a data protection management solution from Dell Dell. The product supports data backup, data recovery and data replication management. An operating system command injection vulnerability exists in Dell EMC Data Protection Advisor versions 6.4, 6.5, and 18.1. A...
Atlassian Confluence Server and Data Center Injection Vulnerabilities
Atlassian Confluence Server is the server version of Atlassian Australia's suite of collaboration software with enterprise knowledge management capabilities and support for building enterprise WiKi.Atlassian Confluence Data Center is the data center version of Atlassian Confluence. Atlassian...
Objective Development Software Little Snitch Backlink Vulnerability
Objective Development Software Little Snitch is a host-based firewall for macOS apps from Objective Development Software of Austria. A backlink vulnerability exists in Objective Development Software Little Snitch 4.5.1 and earlier versions, which can be exploited by an attacker to elevate...
Cellebrite UFED Trust Management Issues Vulnerability (CNVD-2020-51755)
Cellebrite UFED is a universal forensic product from Cellebrite Israel. The product is mainly used for data extraction, transmission and analysis of devices. A security vulnerability exists in Cellebrite UFED versions 5.0 through 7.5.0.845. An attacker could exploit the vulnerability to access...
Code execution vulnerability in PHPOK 5.5 (CNVD-2020-45155)
PHPOK is a content management system for website construction developed by Shenzhen KunHei Technology Co. A code execution vulnerability exists in PHPOK 5.5, which can be exploited by attackers to gain server privileges...
CVE-2020-9624
Adobe DNG Software Development Kit SDK 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...
CVE-2020-9623
Adobe DNG Software Development Kit SDK 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...