Dell EMC XtremIO XMS Cross-Site Scripting Vulnerability

Dell EMC XtremIO XMS is a suite of XtremIO Enterprise Storage Platform management software from Dell USA. A cross-site scripting vulnerability exists in Dell EMC XtremIO XMS versions prior to 6.3.0. The vulnerability stems from a lack of proper validation of client data by the WEB application. An...

SilverStripe Cross-Site Request Forgery Vulnerability (CNVD-2020-10710)

SilverStripe is New Zealand SilverStripe company's set of open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . A cross-site request forgery vulnerability exists in SilverStripe 4.3.3 and earlier...

HTTP Response Splitting

Overview org.wso2.transport.http:org.wso2.transport.http.netty is a HTTP protocol handling implementations for C5 based products. Affected versions of this package are vulnerable to HTTP Response Splitting due to HTTP Header validation being disabled. Remediation Upgrade...

EyesOfNetwork Arbitrary OS Command Execution Vulnerability

EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides features such as business process configuration tools, generating pop-up windows when events occur in the active queue, and more. An arbitrary OS command execution vulnerability exists in EyesOfNetwork 5.3,...

AZL-44577 CVE-2020-8112 affecting package openjpeg2 for versions less than 2.3.1-12

opjt1clbldecodeprocessor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851...

UBUNTU-CVE-2012-6083

Freeciv before 2.3.3 allows remote attackers to cause a denial of service via a crafted packet...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1474)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple iOS and Apple watchOS Mail Message Framework Component Resource Management Error Vulnerability

Apple iOS and Apple watchOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple watchOS is an operating system for smartwatches. mail Message Framework is one of the email messaging frameworks. A resource management error vulnerability exists in th...

Apple iOS and Apple watchOS Mail component input validation error vulnerability

Apple iOS and Apple watchOS are both products of Apple Inc. Apple iOS is an operating system for mobile devices. apple watchOS is an operating system for smartwatches. mail is an email plug-in. An input validation error vulnerability exists in the Mail component in Apple iOS versions prior to 12....

Unspecified Vulnerability in Apple iOS Status Bar Component

Apple iOS is an operating system for mobile devices developed by Apple Inc.Status Bar is one of the status bar components. A security vulnerability exists in the Status Bar component in Apple iOS versions prior to 12.3. An attacker could exploit the vulnerability to display a locked icon after...

Apple iOS Photos Storage Component Sandbox Authentication Bypass Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices.Photos Storage is one of the components of Photos Storage. A security vulnerability exists in the Photos Storage component in Apple iOS versions prior to 12.3. An attacker can exploit this vulnerability to bypass sandboxing...

CVE-2018-18288

CrushFTP through 8.3.0 is vulnerable to credentials theft via URL redirection...

DEBIAN-CVE-2019-19960

In wolfSSL before 4.3.0, wceccmulmodex does not properly resist side-channel attacks...

Unspecified vulnerability in CrushFTP (CNVD-2020-03729)

CrushFTP is a file transfer server. A security vulnerability exists in CrushFTP 8.3.0 and earlier versions that can be exploited by attackers to steal credentials...

GitLab Information Disclosure Vulnerability (CNVD-2020-03764)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in GitLab...

CVE-2019-8613

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A remote attacker may be able to cause arbitrary code execution...

CVE-2019-8620

A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A device may be passively tracked by its WiFi MAC address...

CVE-2019-8605

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges...

CVE-2019-8560

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to read restricted memory...

PT-2019-14730 · Jenkins · Jenkins Alauda Kubernetes Support Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Alauda Kubernetes Support Plugin versions 2.3.0 and earlier Description: A cross-site request forgery issue allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs, potentially capturing the...