CVE-2020-11795

In JetBrains Space through 2020-04-22, the session timeout period was configured improperly...

CVE-2020-11795

In JetBrains Space through 2020-04-22, the session timeout period was configured improperly...

CVE-2020-11416

JetBrains Space through 2020-04-22 allows stored XSS in Chats...

CVE-2020-11416

JetBrains Space through 2020-04-22 allows stored XSS in Chats...

Cross site scripting

JetBrains Space through 2020-04-22 allows stored XSS in Chats...

Authentication flaw

In JetBrains Space through 2020-04-22, the password authentication implementation was insecure...

Code injection

In JetBrains Space through 2020-04-22, the session timeout period was configured improperly...

CVE-2020-11796

In JetBrains Space through 2020-04-22, the password authentication implementation was insecure...

CVE-2020-11796

CVE-2020-11796 concerns a vulnerability in JetBrains Space where, through 2020-04-22, the password authentication implementation was insecure. The connected CNVD entry explicitly notes a vulnerability in Space versions up to 2020-04-22 that allows an attacker to bypass security restrictions due t...

CVE-2020-11795

In JetBrains Space through 2020-04-22, the session timeout period was configured improperly...

CVE-2020-11795

JetBrains Space (through 2020-04-22) has a session timeout misconfiguration affecting the Space component, per CVE-2020-11795. Connected sources confirm Space’s session timeout issue existed in versions up to 2020-04-22, described as an improper session timeout configuration. The JetBrains Q1-202...

CVE-2020-11416

JetBrains Space Chats suffer from stored XSS through 2020-04-22 due to insufficient validation of client-side data in the web application. Affected component: Space Chats in JetBrains Space (Space product). Root cause (per CNVD-2020-25754): lack of proper validation of client-side data in the WEB...

CVE-2020-11416

JetBrains Space through 2020-04-22 allows stored XSS in Chats...

JetBrains Security Bulletin Q1 2020

FYI News Security JetBrains Security Bulletin Q1 2020 Robert Demmer In the first quarter of 2020, we resolved a number of security issues in our products. Here’s a summary report that contains a description of each issue and the version in which it was resolved. Product | Description | Severity |...

cheap-web-space-gd.bitpalast.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1146734 Security Researcher raviakp1004 Helped patch 736 vulnerabilities Received 4 Coordinated Disclosure badges Received 6 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

Regular Expression Denial Of Service (ReDoS)

remove-markdown is vulnerable to regex denial of service. An attacker is able to cause the package to consume excess system resources resulting in an application crash using a large number of space characters...

CVE-2020-3653

Possible buffer over-read in windows wlan driver function due to lack of check of length of variable received from userspace in Snapdragon Compute, Snapdragon Connectivity in MSM8998, QCA6390, SC7180, SC8180X, SDM850...

CVE-2019-10556

Missing length check before copying the data from kernel space to userspace through the copy function can lead to buffer overflow in some cases in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

Buffer overflow

Missing length check before copying the data from kernel space to userspace through the copy function can lead to buffer overflow in some cases in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

CVE-2019-10622

Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from userspace in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon...