PT-2020-5035 · Atlassian +6 · Bamboo Data Center/Server +7

Name of the Vulnerable Software and Affected Versions: XStream versions prior to 1.4.14 Bamboo Data Center and Server version 9.2.1 Description: The issue exists due to the lack of neutralization of special elements used in operating system commands. This may allow a remote attacker to execute...

Citrix SD-WAN Center Elevation of Privilege Vulnerability

Citrix SD-WAN Center is a centralized management system from Citrix Systems. The system is primarily used to configure, monitor and analyze all Citrix SD-WAN devices on the WAN. An elevation of privilege vulnerability exists in Citrix SD-WAN Center versions prior to 11.2.2, 11.1.2b, and 10.2.8,...

CVE-2020-8582

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an authenticated user to view sensitive information...

CVE-2020-12297

Improper access control in Installer for IntelR CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access...

PT-2020-20903 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.0.1 watchOS versions prior to 7.0 tvOS versions prior to 14.0 iOS versions prior to 14.0 iPadOS versions prior to 14.0 Description: An out-of-bounds read issue was addressed with improved input validation, which may...

hw: Fast forward store predictor

A flaw was found in the CPU microarchitecture where a local attacker is able to abuse a timing issue which may allow them to infer internal architectural state from previous executions on the CPU...

hw: Vector Register Leakage-Active

A flaw was found in the Intel Advanced Vector Extensions AVX implementation, where a local authenticated attacker with the ability to execute AVX instructions can gather the AVX register state from previous AVX executions. This vulnerability allows information disclosure of the AVX register state...

hw: Vector Register Leakage-Active

A flaw was found in the Intel Advanced Vector Extensions AVX implementation, where a local authenticated attacker with the ability to execute AVX instructions can gather the AVX register state from previous AVX executions. This vulnerability allows information disclosure of the AVX register state...

PT-2020-4740 · Intel · Intel Amt

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.80 IntelR AMT versions prior to 11.12.80 IntelR AMT versions prior to 11.22.80 IntelR AMT versions prior to 12.0.70 IntelR AMT versions prior to 14.0.45 Description: The issue is related to an out-of-bounds...

CloudBees Jenkins Active Directory Plugin Authorization Issue Vulnerability (CNVD-2020-61922)

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Active Directory Plugin is used in which an...

CVE-2020-24433

Adobe Acrobat Reader DC versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175 and earlier are affected by a local privilege escalation vulnerability that could enable a user without administrator privileges to delete arbitrary files and potentially execute arbitrary...

PT-2020-6901 · Apache +2 · Apache Shiro +2

Name of the Vulnerable Software and Affected Versions: Apache Shiro versions prior to 1.7.0 Description: The issue is related to an authentication bypass when Apache Shiro is used with Spring. A specially crafted HTTP request may cause this bypass, potentially allowing a remote attacker to exploi...

DEBIAN-CVE-2020-15995

Out of bounds write in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

DEBIAN-CVE-2020-15968

Use after free in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2020-15974

Integer overflow in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to bypass site isolation via a crafted HTML page...

UBUNTU-CVE-2020-15987

Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC stream...

Zoho ManageEngine Application Manager SQL Injection Vulnerability (CNVD-2021-05408)

ZOHO ManageEngine Application Manager is a set of application monitoring and management system of the United States ZhuoHao ZOHO company. The system is mainly used to monitor server and application performance. A SQL injection vulnerability exists in Zoho ManageEngine Application Manager 14.7 Bui...

CVE-2018-19954

The cross-site scripting vulnerability has been reported to affect earlier versions of Photo Station. If exploited, the vulnerability could allow remote attackers to inject malicious code. This issue affects: QNAP Systems Inc. Photo Station versions prior to 5.7.11; versions prior to 6.0.10...

CVE-2018-19956

The cross-site scripting vulnerability has been reported to affect earlier versions of Photo Station. If exploited, the vulnerability could allow remote attackers to inject malicious code. This issue affects: QNAP Systems Inc. Photo Station versions prior to 5.7.11; versions prior to 6.0.10...

Apple macOS Catalina Kernel Denial of Service Vulnerability

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A denial of service vulnerability exists in the kernel of macOS Catalina versions prior to 10.15.6. A remote attacker could exploit this vulnerability to cause a denial of service...