5209 matches found
PT-2020-13426 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 13.0.12 GitLab versions prior to 13.1.6 GitLab versions prior to 13.2.3 Description: A cross-site scripting XSS issue exists in the issue reference number tooltip. Recommendations: For versions prior to 13.0.12, updat...
PT-2020-13431 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 13.0.12 GitLab versions prior to 13.1.6 GitLab versions prior to 13.2.3 Description: The issue is related to improper access control on the Applications page. Recommendations: For versions prior to 13.0.12, update to...
Google Go Denial of Service Vulnerability (CNVD-2020-46848)
Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google. A security vulnerability exists in Google Go versions prior to 1.13.15 and 14.x prior to 1.14.7. An attacker can exploit the vulnerability with invalid input to cause an infinite...
Inductive Automation Ignition Authorization Issues Vulnerability
Inductive Automation Ignition is a data acquisition and monitoring system SCADA from Inductive Automation USA. A security vulnerability exists in Inductive Automation Ignition versions prior to 8 8.0.13. An attacker could exploit the vulnerability to obtain sensitive information...
PT-2020-20857 · Apple · Ios +3
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.6 iPadOS versions prior to 13.6 tvOS versions prior to 13.4.8 watchOS versions prior to 6.2.8 Description: The issue involves an out-of-bounds read that has been addressed with improved bounds checking. An attacker wh...
CVE-2020-14520
The affected product is vulnerable to an information leak, which may allow an attacker to obtain sensitive information on the Ignition 8 all versions prior to 8.0.13...
Arbitrary File Deletion Vulnerability in Bludit CMS v3.13.0
Bludit CMS is a foreign multilingual lightweight website CMS system. Bludit CMS v3.13.0 has an arbitrary file deletion vulnerability that allows attackers to delete arbitrary zip files...
PT-2020-20843 · Apple +7 · Ipados +13
Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 13.6 Apple iPadOS versions prior to 13.6 Apple tvOS versions prior to 13.4.8 Apple watchOS versions prior to 6.2.8 Apple Safari versions prior to 13.1.2 Apple iTunes for Windows versions prior to 12.10.8 Apple iClo...
Apple Safari, iOS and iPadOS iAP Component Input Validation Vulnerability
Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.... Apple iPadOS is an operating system for the iPad tablet computer....
Apple iOS and iPadOS WiFi Component Code Issue Vulnerability
Apple iOS and Apple iPadOS are both products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.WiFi is one of the wireless networking components.... A security vulnerability exists in the WiFi component of Apple iOS...
Apple iOS, iPadOS and watchOS Kernel Component Memory Corruption Vulnerability
Apple iOS is an operating system developed for mobile devices.Apple watchOS is an operating system for smartwatches.Apple iPadOS is an operating system for iPad tablets.Kernel is a kernel component of the operating system.Apple watchOS is a smartwatch operating system.Apple watchOS is a smartwatc...
CVE-2020-2031
creationtimestamp| type| source ---|---|--- 2020-07-13 17:35:05+00:00| seen| https://t.me/SecLabNews/8054...
Xen competitive conditions loophole
Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in Xen 4.13....
PT-2020-14477 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab EE versions 11.3 through 13.1.2 Description: The issue is related to Incorrect Access Control in GitLab EE due to the Maven package upload endpoint. This allows for unauthorized access. Recommendations: For GitLab EE versions 11.3...
PT-2020-5907 · Xen +2 · Xen +2
Name of the Vulnerable Software and Affected Versions: Xen versions through 4.13.x Description: An issue in Xen allows Arm guest OS users to cause a hypervisor crash due to a missing alignment check in the VCPUOP register vcpu info hypercall. This hypercall is used by a guest to register a shared...
PT-2020-5867 · Php +9 · Php +9
Name of the Vulnerable Software and Affected Versions: PHP versions 7.3.x through 7.3.25 PHP versions 7.4.x through 7.4.13 PHP version 8.0.0 Description: The issue is related to insufficient input validation in PHP's URL validation functions, such as filter var$url, FILTER VALIDATE URL. This allo...
PT-2021-6717 · Arm +2 · Mbed Tls +2
Name of the Vulnerable Software and Affected Versions: Arm Mbed TLS versions prior to 2.23.0 Description: A remote attacker can recover plaintext because a certain Lucky 13 countermeasure doesn't properly consider the case of a hardware accelerator. This issue is related to the implementation of...
CVE-2019-20413
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service DoS vulnerability on the UserPickerBrowser.jspa page. The affected versions are before version 7.13.9, and from version 8.0.0 before 8.4.2...
CVE-2019-20411
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify Wallboard settings via a Cross-site request forgery CSRF vulnerability. The affected versions are before version 7.13.9, and from version 8.0.0 before 8.4.2...