CVE-2020-3485 Cisco Vision Dynamic Signage Director Role-Based Access Control Vulnerability

A vulnerability in the role-based access control RBAC functionality of the web management software of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker to access resources that they should not be able to access and perform actions that they should not be able to...

The vulnerability of the Fly-wm window manager, related to the disclosure of information, allows attackers to gain access to confidential data.

The vulnerability of the Fly-wm window manager is related to the disclosure of information when both the screen shutdown and the lock mechanism are activated at the same time. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

Medium: gnome-shell

Issue Overview: It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions. CVE-2019-3820 Affected...

Ubuntu 20.04 LTS : GNOME Shell vulnerability (USN-4464-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4464-1 advisory. It was discovered that GNOME Shell incorrectly handled the login screen password dialog. Sensitive information could possibly be exposed during user logout. Tenab...

USN-4464-1 gnome-shell vulnerability

It was discovered that GNOME Shell incorrectly handled the login screen password dialog. Sensitive information could possibly be exposed during user logout...

PT-2020-14627

Name of the Vulnerable Software and Affected Versions SICAM WEB firmware for SICAM A8000 RTUs versions prior to V05.30 Description A Cross-Site-Scripting XSS issue has been identified, where the login screen does not sufficiently sanitize input. This allows an attacker to generate specially craft...

USN-4457-1 software-properties vulnerability

Jason A. Donenfeld discovered that Software Properties incorrectly filtered certain escape sequences when displaying PPA descriptions. If a user were tricked into adding an arbitrary PPA, a remote attacker could possibly manipulate the screen...

Siemens SICAM A8000 RTU Cross-Site Scripting Vulnerability

The SICAM A8000 RTU Remote Terminal Unit series is a modular family of devices for remote control and automation applications in all areas of energy supply. A cross-site scripting vulnerability exists in the Siemens SICAM A8000 RTU. The vulnerability is caused due to the login screen failing to...

The vulnerability in the full-screen mode of the Google Chrome browser allows a hacker to compromise data integrity.

The vulnerability of the full-screen mode of the Google Chrome browser is related to a bug in the system’s resource management mechanism. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially created HTML page...

The vulnerability in the full-screen mode of the Google Chrome browser allows a hacker to compromise data integrity.

The vulnerability of the full-screen mode of the Google Chrome browser is related to a bug in the system’s resource management mechanism. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially created HTML page...

SUSE SLED15 / SLES15 Security Update : java-11-openjdk (SUSE-SU-2020:2143-1)

This update for java-11-openjdk fixes the following issues : Update to upstream tag jdk-11.0.8+10 July 2020 CPU, bsc1174157 - Security fixes : + JDK-8230613: Better ASCII conversions + JDK-8231800: Better listing of arrays + JDK-8232014: Expand DTD support + JDK-8233234: Better Zip Naming +...

The vulnerability in the full-screen mode of the Google Chrome browser allows a hacker to compromise data integrity.

The vulnerability of the full-screen mode of the Google Chrome browser is related to the lack of a mechanism for standard resolutions. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

CVE-2020-16199

Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to read/modify information, execute arbitrary code, and/or crash the...

openSUSE Security Update : opera (openSUSE-2020-917)

This update for opera fixes the following issues : Opera was updated to version 68.0.3618.104 - CHR-7909 Update chromium on desktop-stable-81-3618 to 81.0.4044.138 - CVE-2020-6831, CVE-2020-6464 - DNA-85609 Mac Tabs shrinking & disappearing - DNA-85629 Crash at...

thompsonscreenprints.com Cross Site Scripting vulnerability OBB-1238599

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

USN-4434-1: LibVNCServer vulnerabilities

Ramin Farajpour Cami discovered that LibVNCServer incorrectly handled certain malformed unix socket names. A remote attacker could exploit this with a crafted socket name, leading to a denial of service, or possibly execute arbitrary code. CVE-2019-20839 It was discovered that LibVNCServer did no...

CVE-2020-10918

This vulnerability allows remote attackers to bypass authentication on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authentication mechanism. The issue is due t...

CVE-2020-15698

An issue was discovered in Joomla! through 3.9.19. Inadequate filtering on the system information screen could expose Redis or proxy credentials...

CVE-2020-15698: Undefined Security Weakness

An issue was discovered in Joomla! through 3.9.19. Inadequate filtering on the system information screen could expose Redis or proxy credentials...

CVE-2019-20898: Undefined Security Weakness

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to access sensitive information without being authenticated in the Global permissions screen. The affected versions are before version 8.8.0...