UBUNTU-CVE-2020-2693

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

UBUNTU-CVE-2020-2702

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

UBUNTU-CVE-2020-6377

Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

PT-2020-7697 · Dompdf +2 · Dompdf +2

Name of the Vulnerable Software and Affected Versions: DOMPDF versions prior to 0.6.2 Description: The issue allows remote code execution. It is related to a previously identified problem. Recommendations: For versions prior to 0.6.2, update to version 0.6.2 or later to resolve the issue...

BigProf Online Invoicing System Cross-Site Scripting Vulnerability

BigProf Online Invoicing System OIS is an online invoicing system. A cross-site scripting vulnerability exists in BigProf OIS 2.6 and prior versions. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to...

Telos Automated Message Handling System Cross-Site Scripting Vulnerability

Telos Automated Message Handling System is an automated message handling system that automates the Web-based distribution and management of enterprise-wide organizational messages. A cross-site scripting vulnerability exists in itemlookup.asp in Telos Automated Message Handling System versions...

Telos Automated Message Handling System Cross-Site Scripting Vulnerability (CNVD-2020-04114)

Telos Automated Message Handling System AMHS is an automated message handling system that enables automated Web-based distribution and management of enterprise-wide organizational messages. A cross-site scripting vulnerability exists in prefs.asp in Telos Automated Message Handling System AMHS...

Unspecified Vulnerability in Yandex ClickHouse

Yandex ClickHouse is a set of open source columnar databases for online analytical processing of the Russian company Yandex. A security vulnerability exists in Yandex ClickHouse versions prior to 19.14. An attacker can exploit the vulnerability to execute code or cause a denial of service...

Easy XML Editor Code Problem Vulnerability

Easy XML Editor is an XML editor. A code issue vulnerability exists in Easy XML Editor v1.7.8 and prior versions. The vulnerability stems from an improperly designed or implemented code development process for a web-based system or product. No detailed vulnerability details are provided at this...

ALPINE-CVE-2019-14864

Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag nolog set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This would discloses and collects any sensitive data...

GitLab CE/EE Access Control Error Vulnerability (CNVD-2020-03846)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Community and...

CloudBees Jenkins Team Concert Plugin Authorization Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . An authorization issue vulnerability exists in CloudBees Jenkins Team Concert Plugin 1.3.0 and prior versions. The vulnerability stems from a lack of authenticati...

Simplifile RecordFusion Information Disclosure Vulnerability

Simplifile RecordFusion is an electronic records service system from Simplifile, Inc. in the United States. A security vulnerability exists in Simplifile RecordFusion 2019-11-25 and prior versions. A remote attacker can exploit logger/logs?/... / or logger/hist?/... / URI to access local files...

Malwarebytes AdwCleaner Code Issue Vulnerability

Malwarebytes AdwCleaner is a utility program from the American company Malwarebytes. The program is mainly used to scan and remove pre-installed software such as advertisements from Windows computers. A code issue vulnerability exists in versions of Malwarebytes AdwCleaner prior to 8.0.1. The...

Progress Telerik UI for ASP.NET AJAX Code Issue Vulnerability

Progress Telerik UI for ASP.NET AJAX is an HTML editor. A code issue vulnerability exists in Progress Telerik UI for ASP.NET AJAX 2019.3.1023 and prior versions. The vulnerability stems from an improperly designed or implemented code development process for a web-based system or product. No...

cPanel Authorization Issues Vulnerability (CNVD-2020-04078)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 68.0.27. No detailed vulnerability details are provided at this ti...

cPanel code issue vulnerability (CNVD-2020-03740)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 70.0.23. An attacker can exploit the vulnerability to elevate...

PT-2019-19093 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.14.4 Description: A logic issue was addressed with improved validation, which may allow a malicious application to elevate privileges. Recommendations: For versions prior to 10.14.4, update to macOS Mojave 10.14.4 t...

chromium-browser: Incorrect security UI in Omnibox

Insufficient policy enforcement in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...

statusnet cross-site scripting vulnerability (CNVD-2020-04299)

statusnet is an open source micro-blogging program written in PHP. A cross-site scripting vulnerability exists in versions of statusnet prior to 0.9.9. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to...