7591 matches found
Cross site request forgery (csrf)
The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS is vulnerable to CSRF, with impacts such as stealing data, modifying disk contents, or exhausting disk space...
CVE-2020-12427
The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS is vulnerable to CSRF, with impacts such as stealing data, modifying disk contents, or exhausting disk space...
FreeBSD : FreeBSD -- Memory disclosure vulnerability in libalias (78992249-947c-11ea-92ab-00163e433440)
The FTP packet handler in libalias incorrectly calculates some packet lengths. This may result in disclosing small amounts of memory from the kernel for the in-kernel NAT implementation or from the process space for natd for the userspace implementation. Impact : A malicious attacker could send...
FreeBSD -- Insufficient packet length validation in libalias
Problem Description: libalias3 packet handlers do not properly validate the packet length before accessing the protocol headers. As a result, if a libalias3 module does not properly validate the packet length before accessing the protocol header, it is possible for an out of bound read or write...
FreeBSD -- Memory disclosure vulnerability in libalias
Problem Description: The FTP packet handler in libalias incorrectly calculates some packet lengths. This may result in disclosing small amounts of memory from the kernel for the in-kernel NAT implementation or from the process space for natd for the userspace implementation. Impact: A malicious...
PT-2020-4630 · Php +8 · Php +8
Name of the Vulnerable Software and Affected Versions: PHP versions 7.2.x through 7.2.30 PHP versions 7.3.x through 7.3.17 PHP versions 7.4.x through 7.4.5 Description: The issue is related to an integer overflow buffer in the PHP language interpreter. Exploitation of this issue could allow a...
NVIDIA Display driver competitive conditions issue vulnerability
NVIDIA graphics driver is a graphics driver from the American company NVIDIA. A competing condition issue vulnerability exists in NVIDIA Display driver Linux versions prior to 295.53. An attacker could exploit this vulnerability to leak kernel memory into user space...
Mozilla Thunderbird Access Control Error Vulnerability
Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. An access control error vulnerability exists in Mozilla Thunderbird versions prior to...
CVE-2020-1631
creationtimestamp| type| source ---|---|--- 2020-04-30 10:30:02+00:00| seen| https://t.me/SecLabNews/7490 2020-10-13 06:50:38+00:00| seen| MISP/453274cf-e60d-452a-b88e-0bf6a5a6dae4 2020-10-13 15:16:18+00:00| seen| MISP/f628d96f-2958-4717-91da-e86aace4925d 2023-06-14 21:10:04+00:00| seen|...
CVE-2020-10641
An unprotected logging route may allow an attacker to write endless log statements into the database without space limits or authentication. This results in consuming the entire available hard-disk space on the Ignition 8 Gateway versions prior to 8.0.10, causing a denial-of-service condition...
CVE-2020-10641
An unprotected logging route may allow an attacker to write endless log statements into the database without space limits or authentication. This results in consuming the entire available hard-disk space on the Ignition 8 Gateway versions prior to 8.0.10, causing a denial-of-service condition...
glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries
A vulnerability was discovered in glibc where the LDPREFERMAP32BITEXEC environment variable is not ignored when running binaries with the setuid flag on x8664 architectures. This allows an attacker to force system to utilize only half of the memory making the system think the software is 32-bit...
Kernel: net: using kernel space address bits to derive IP ID may potentially break KASLR
A flaw was found in the way the Linux kernel derived the IP ID field from a partial kernel space address returned by a nethashmix function. A remote user could observe this IP ID field to extract the kernel address bits used to derive its value, which may result in leaking the hash key and...
exiv2: null-pointer dereference in http.c causing denial of service
http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service crash due to a NULL pointer dereference by returning a crafted response that lacks a space character...
UBUNTU-CVE-2020-12135
bson before 0.8 incorrectly uses int rather than sizet for many variables, parameters, and return values. In particular, the bsonensurespace parameter bytesNeeded could have an integer overflow via properly constructed bson input...
JetBrains Space Chats Cross-Site Scripting Vulnerability
JetBrains Space is a team collaboration solution from the Czech company JetBrains. The product supports online chat, online meetings, code review and package repository, etc. Chats is one of the online chat components. A cross-site scripting vulnerability exists in Chats in JetBrains Space versio...
JetBrains Space Code Issue Vulnerability
JetBrains Space is a team collaboration solution from the Czech company JetBrains. The product supports features such as online chat, online meetings, code review and package repository. A security vulnerability exists in JetBrains Space version 2020-04-22 and earlier, which can be exploited by...
JetBrains Space License Issue Vulnerability
JetBrains Space is a team collaboration solution from the Czech company JetBrains. The product supports features such as online chat, online meetings, code review and package repository. A security vulnerability exists in JetBrains Space version 2020-04-22 and earlier that stems from insecure...