Facebook Thrift Denial of Service Vulnerability (CNVD-2020-24677)

Facebook Thrift is a branch of Apache Thrift from Facebook Inc. is a serialization and RPC framework for service communication. A security vulnerability exists in versions prior to Facebook Thrift v2020.03.16.00. An attacker can exploit the vulnerability by sending a short message to cause a deni...

cPanel Input Validation Error Vulnerability (CNVD-2020-21072)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 82.0.18, which stems from the fact that values generated ...

Contao Cross-Site Scripting Vulnerability

Contao is an open source content management system CMS developed using PHP. The system supports search engine , rights management and CSS framework . A cross-site scripting vulnerability exists in Contao versions prior to 4.5.7, which stems from a lack of proper validation of client-side data by...

CVE-2020-9423

LogicalDoc before 8.3.3 could allow an attacker to upload arbitrary files, leading to command execution or retrieval of data from the database. LogicalDoc provides a functionality to add documents. Those documents could then be used for multiple tasks, such as version control, shared among users,...

psd-tools code issue vulnerability

psd-tools is a Python package for reading Adobe Photoshop PSD files. A code issue vulnerability exists in versions of psd-tools prior to 1.9.4, no details of the vulnerability are provided at this time...

cPanel Authentication Bypass Vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. An authentication bypass vulnerability exists in cPanel versions prior to 82.0.18. The vulnerability stems from improper parsing of the password file format. An attacker can exploit this vulnerability to achieve...

Dolibarr ERP/CRM SQL Injection Vulnerability (CNVD-2020-18399)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A SQL injection vulnerability exists in Dolibarr ERP/CRM...

WordPress File Upload Path Traversal Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Iptanus WordPress File Upload plugin is used in one of the file upload plugin. A path traversal vulnerability exis...

Sql injection

SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection issue 1 of 4...

PT-2020-11969 · WordPress · Popup Builder

Name of the Vulnerable Software and Affected Versions: popup-builder plugin versions prior to 3.64.1 Description: The issue allows remote attackers to inject arbitrary JavaScript into existing popups via an unsecured ajax action in com/classes/Ajax.php. An unauthenticated attacker can insert...

BlueZ Access Control Error Vulnerability

BlueZ is a Bluetooth protocol stack written in C. It is primarily used to provide support for the core Bluetooth layers and protocols. An Access Control Error vulnerability exists in subsystems in BlueZ versions prior to 5.54. The vulnerability arises from a network system or product not properly...

PT-2020-11912 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 12.8.2 Description: The issue allows information disclosure due to badge images not being proxied, resulting in mixed content warnings and the leakage of the user's IP address. Recommendations: For versions prior to...

CVE-2020-0501

Buffer overflow in IntelR Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to potentially enable a denial of service via local access...

Avast AntiTrack and AVG Technologies Antitrack Trust Management Issue Vulnerabilities

Avast AntiTrack is a suite of antivirus software from the Czech company Avast.AVG Technologies Antitrack is a suite of antivirus software from the Czech company AVG Technologies. A trust management issue vulnerability exists in Avast AntiTrack versions prior to 1.5.1.172 and AVG Technologies...

PYSEC-2020-5

A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp. This directory is created with "umask...

Nitro Pro Heap Memory Corruption Vulnerability (CNVD-2020-16096)

Nitro Pro is a desktop product with full PDF creation and editing capabilities. A heap memory corruption vulnerability exists in npdf.dll in versions prior to Nitro Pro 13.13.2.242. An attacker can exploit this vulnerability via a specially crafted PDF document to cause heap corruption to occur a...

Unspecified Vulnerability in Mozilla Firefox (CNVD-2020-18417)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in versions prior to Mozilla Firefox 25. An attacker could exploit the vulnerability to modify content written by anonymous users...

Dell Security Management Server Code Issue Vulnerability

Dell Security Management Server is a data security management solution from Dell Dell. A code issue vulnerability exists in Dell Security Management Server versions prior to 10.2.10. The vulnerability stems from an improperly designed or implemented code development process for a network system o...

Yubico YubiKey Validation Server SQL Injection Vulnerability

Yubico YubiKey Validation Server is an authentication server from the Swedish company Yubico. A SQL injection vulnerability exists in YubiKey Validation Server versions prior to 2.40. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based...

CVE-2020-1892

Insufficient boundary checks when decoding JSON in JSONparser allows read access to out of bounds memory, potentially leading to information leak and DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 inclusive, versions between...