11004 matches found
CVE-2020-8013
A UNIX Symbolic Link Symlink Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set permissions intended for specific binaries on other binaries because it erroneously followed symlinks. The symlinks can't be...
Coppermine Input Validation Error Vulnerability
Coppermine is a multi-purpose integrated web graphics library script written in PHP. An input validation error vulnerability exists in Coppermine gallery versions prior to 1.4.26. An attacker can exploit this vulnerability to execute code...
DEBIAN-CVE-2020-6418
Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
UBUNTU-CVE-2020-6384
Use after free in WebAudio in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Gurux GXDLMS Director Path Traversal Vulnerability
Gurux GXDLMS Director is an open source Windows program for interacting with meters by using the DLMS / COSEM protocol. A path traversal vulnerability exists in Gurux GXDLMS Director 8.5.1905.1301 and prior versions. The vulnerability stems from the failure of a network system or product to...
BuddyPress Access Control Error Vulnerability
BuddyPress is a plugin suite that turns WordPress into a social networking site. An Access Control Error vulnerability exists in BuddyPress versions prior to 5.1.2. The vulnerability stems from a network system or product that does not properly restrict access to resources from unauthorized roles...
danfruehauf NetworkManager-ssh elevation of privilege vulnerability
NetworkManager-ssh is NetworkManager's SSH VPN integration. An elevation of privilege vulnerability exists in danfruehauf NetworkManager-ssh versions prior to 1.2.11. The vulnerability stems from mishandling of other options. No detailed vulnerability details are provided at this time...
Mozilla: Incorrect parsing of template tag could result in JavaScript injection
If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed. A site that relied on the browser behaving correctly could suffer a cross-site scripting vulnerability as a result. In general, this flaw cannot be...
Bodymen Access Control Error Vulnerability
bodymen is a body parser middleware for MongoDB, Express and Nodejs MEN. A security vulnerability exists in bodymen versions prior to 1.1.1. An attacker can exploit the vulnerability to add or modify Object.prototype properties with the help of the 'handler' parameter...
Cisco Unified Contact Center Express Command Execution Vulnerability
Cisco Unified Contact Center Express Unified CCX is a customer relationship management component of a unified communications solution from Cisco. The component supports features such as self-service voice, call distribution, and customer access control. A code issue vulnerability exists in Cisco...
jenkins: UDP multicast/broadcast service amplification reflection attack
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier was vulnerable to a UDP amplification reflection denial of service attack on port 33848...
CVE-2016-1000004
Insufficient type checks were employed prior to casting input data in SimpleXMLElementexportNode and simplexmlimportdom. This issue affects HHVM versions prior to 3.9.5, all versions between 3.10.0 and 3.12.3 inclusive, and all versions between 3.13.0 and 3.14.1 inclusive...
CVE-2016-1000004
Insufficient type checks were employed prior to casting input data in SimpleXMLElementexportNode and simplexmlimportdom. This issue affects HHVM versions prior to 3.9.5, all versions between 3.10.0 and 3.12.3 inclusive, and all versions between 3.13.0 and 3.14.1 inclusive...
CVE-2020-5530
Cross-site request forgery CSRF vulnerability in Easy Property Listings versions prior to 3.4 allows remote attackers to hijack the authentication of administrators via unspecified vectors...
Libyang Resource Management Error Vulnerability
libyang is a YANG data modeling language parser and toolkit written in C. It can be used as a toolkit for data modeling. A resource management error vulnerability exists in versions prior to libyang 1.0-r1. The vulnerability stems from mismanagement of system resources e.g., memory, disk space,...
chromium-browser: Insufficient policy enforcement in CSP
Insufficient policy enforcement in CSP in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass content security policy via a crafted HTML page...
chromium-browser: Out of bounds read in JavaScript
Out of bounds read in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...
HP System Event Utility Input Validation Error Vulnerability
HP System is a system event utility component. A security vulnerability exists in HP System Event Utility versions prior to 1.4.33. A local attacker can exploit this vulnerability to execute arbitrary code via the HP System Event Utility system service...
Lenovo XClarity Administrator Code Issue Vulnerability
Lenovo XClarity Administrator LXCA is a centralized resource management solution from Lenovo, China. The product is capable of providing agentless hardware management for servers, storage, network switches, and more. A code issue vulnerability exists in Lenovo XClarity Administrator LXCA versions...