1428 matches found
PT-2020-14198 · Synergy +1 · Synergy +1
Name of the Vulnerable Software and Affected Versions: Synergy versions prior to 1.12.0 Description: The issue allows a Synergy server to be crashed by receiving a kMsgHelloBack packet with a client name length set to 0xffffffff 4294967295 if the server's memory is less than 4 GB. However, it was...
CVE-2020-14092
The CodePeople Payment Form for PayPal Pro plugin before 1.1.65 for WordPress allows SQL Injection...
PYSEC-2020-79
In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file...
Unspecified Vulnerability in Mattermost Server (CNVD-2020-41491)
Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 5.8.0. The vulnerability can be exploited by an attacker to perform unauthorized operations when Town Square is set to read-onl...
Unspecified vulnerability in Google Chrome accessibility
Google Chrome is a web browser of Google Google, Inc. accessibility is one of the auxiliary functions of the plug-in. A security vulnerability exists in accessibility in Google Chrome versions prior to 74.0.3729.108, which can be exploited by remote attackers to obtain sensitive information from...
UBUNTU-CVE-2020-12408
When browsing a document hosted on an IP address, an attacker could insert certain characters to flip domain and path information in the address bar. This vulnerability affects Firefox 77...
DEBIAN-CVE-2020-6481
Insufficient policy enforcement in URL formatting in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to perform domain spoofing via a crafted domain name...
PT-2020-2735
Name of the Vulnerable Software and Affected Versions Video Insight VMS versions prior to 7.6.1 Description The issue is caused by insufficient validation of user-provided data, allowing a remote attacker to execute arbitrary code by sending a specially crafted malicious request. This can lead to...
Pegasystem PEGA Platform Cross-Site Scripting Vulnerability (CNVD-2020-27232)
Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem UK. The platform is used to develop applications for BPM Business Process Management, Case Management, Real Time Decision Making and CRM Customer Relationship Management. A cross-site scripting vulnerability...
CVE-2018-21104
NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user...
CVE-2017-18807
CVE-2017-18807 affects NETGEAR ReadyNAS OS 6 devices running versions prior to 6.8.0 and is described as a stored Cross-Site Scripting (XSS) vulnerability. The connected records confirm the affected product family and the version threshold, but do not provide technical details about the root caus...
NETGEAR WAC505 and WAC510 Information Disclosure Vulnerability
Both the NETGEAR WAC505 and NETGEAR WAC510 are a wireless access point AP from NETGEAR. An information disclosure vulnerability exists in the NETGEAR WAC505 version prior to V5.6.8.3 and the WAC510 version prior to V5.6.8.3, which can be exploited by an attacker to obtain sensitive information...
DEBIAN-CVE-2020-6444
Uninitialized use in WebRTC in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2020-10623
Multiple vulnerabilities could allow an attacker with low privileges to perform SQL injection on WebAccess/NMS versions prior to 3.0.2 to gain access to sensitive information...
chromium-browser: Use after free in audio
Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Apple macOS Catalina FaceTime Component Logic Issue Vulnerability
Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in the FaceTime component of Apple macOS Catalina versions prior to 10.15.4. A local attacker can exploit the vulnerability to obtain sensitive user information...
MantisBT < 2.21.3 XSS Vulnerability - Windows
MantisBT is prone to a cross-site scripting vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...
DEBIAN-CVE-2020-6418
Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
HP System Event Utility Input Validation Error Vulnerability
HP System is a system event utility component. A security vulnerability exists in HP System Event Utility versions prior to 1.4.33. A local attacker can exploit this vulnerability to execute arbitrary code via the HP System Event Utility system service...