11004 matches found
Atlassian Companion app code issue vulnerability
The Atlassian Companion app is an application from Atlassian Australia that enables users to edit Confluence files in their preferred desktop application. A code issue vulnerability exists in the file editing functionality in versions of the Atlassian Companion app prior to 1.0.0. A local attacke...
PT-2020-13661 · Open Source Matters · Joomla!
Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.19 Description: The issue is related to missing token checks in the com postinstall component, which leads to Cross-Site Request Forgery CSRF. CSRF is an attack where an attacker tricks a user into performing...
Lexiglot Cross-Site Request Forgery Vulnerability
Lexiglot is a translation platform written in PHP by the French software developer Damien Sorel. A cross-site request forgery vulnerability exists in Lexiglot 2014-11-20 and earlier versions, which stems from the program failing to properly validate user input. A remote attacker could exploit thi...
Atlassian Fisheye and Crucible Cross-Site Scripting Vulnerabilities (CNVD-2020-31427)
Atlassian Fisheye and Crucible are both products of the Australian company Atlassian, Atlassian Fisheye is a suite of in-depth viewers of source code and Crucible is a suite of code review tools. A cross-site scripting vulnerability exists in Atlassian Fisheye and Crucible versions prior to 4.8.2...
Lexiglot Information Disclosure Vulnerability (CNVD-2020-36284)
Lexiglot is a translation platform written in PHP by the French software developer Damien Sorel. An information disclosure vulnerability exists in Lexiglot 2014-11-20 and earlier versions, which stems from the presence of usernames and passwords on the command line and can be exploited by a local...
UBUNTU-CVE-2020-12408
When browsing a document hosted on an IP address, an attacker could insert certain characters to flip domain and path information in the address bar. This vulnerability affects Firefox 77...
PT-2020-7000 · Draytek · Draytek Vigor2960 +2
Name of the Vulnerable Software and Affected Versions: Draytek Vigor3900 versions prior to 1.5.1.1 Draytek Vigor2960 versions prior to 1.5.1.1 Draytek Vigor300B versions prior to 1.5.1.1 Description: The issue concerns command-injection vulnerabilities in the mainfunction.cgi file of the affected...
CVE-2020-8330
A denial of service vulnerability was reported in the firmware prior to version 1.01 used in Lenovo Printer LJ4010DN that could be triggered by a remote user sending a crafted packet to the device, preventing subsequent print jobs until the printer is rebooted...
Apple iOS, iPadOS and macOS Catalina USB Audio Component Denial of Service Vulnerability
Apple iOS is a product of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Catalina is a dedicated operating system developed for Mac computers.USB USB Audio is one of the digital audio connectivity packages....
Apple macOS Catalina Find My Component Input Validation Error Vulnerability
Apple macOS Catalina is a proprietary operating system developed by Apple Inc. for Mac computers.Find My is one of the components that supports tracking the location of Apple devices. A security vulnerability exists in the Find My component in Apple macOS Catalina versions prior to 10.15.5. A loc...
PT-2020-4071 · Apple · Itunes For Windows +7
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.5 iPadOS versions prior to 13.5 tvOS versions prior to 13.4.5 watchOS versions prior to 6.2.5 Safari versions prior to 13.1.1 iTunes for Windows versions prior to 12.10.7 iCloud for Windows versions prior to 11.2 and...
Knock Knock Input Validation Error Vulnerability
Pixel & Tonic Craft CMS is the United States Pixel & Tonic company's set of content management system CMS.Knock Knock is one of the access rights management plugin. A security vulnerability exists in Knock Knock versions prior to 1.2.8 for Pixel & Tonic Craft CMS. An attacker can exploit this...
Aviatrix Systems Controller Cross-Site Request Forgery Vulnerability (CNVD-2020-31578)
Aviatrix Systems Controller is a centralized control panel for business processes and management of Aviatrix Systems solutions from Aviatrix Systems, USA. A cross-site request forgery vulnerability exists in Aviatrix Systems Controller versions prior to 5.4.1066, which stems from calling an API...
CVE-2020-13417
An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224. This affects Linux, macOS, and Windows installations for certain OpenSSL parameters...
Zabbix SIA Zabbix Code Execution Vulnerability
Zabbix SIA Zabbix is an open source monitoring system from the Latvian company Zabbix SIA. The system supports network monitoring, server monitoring, cloud monitoring and application monitoring. Zabbix SIA A security vulnerability exists in zabbix3-proxy versions prior to 3.0.31 and zabbix3-serve...
CVE-2020-7808
In RAONWIZ K Upload v2018.0.2.51 and prior, automatic update processing without integrity check on update moduleweb.js allows an attacker to modify arguments which causes downloading a random DLL and injection on it...
DEBIAN-CVE-2020-6481
Insufficient policy enforcement in URL formatting in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to perform domain spoofing via a crafted domain name...
DEBIAN-CVE-2020-6473
Insufficient policy enforcement in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...