Bludit Cross-Site Scripting Vulnerability (CNVD-2020-35971)

Bludit is an open source, lightweight blog content management system CMS. A cross-site scripting vulnerability exists in the 'showAlert' function of the admin panel in Bludit version 3.12.0. The vulnerability stems from the WEB application's lack of proper validation of client-side data. An...

CloudBees Jenkins ECharts API Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . ECharts API Plugin is used in one of the chart...

Image Resizer Cross-Site Scripting Vulnerability

Pixel & Tonic Craft CMS is a content management system CMS of Pixel & Tonic, Inc. Image Resizer is one of the image editing plug-ins. A cross-site scripting vulnerability exists in Image Resizer versions prior to 2.0.9 for Pixel & Tonic Craft CMS. The vulnerability stems from a lack of proper...

QEMU Buffer Overflow Vulnerability (CNVD-2020-30436)

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A buffer overflow vulnerability exists in QEMU. The vulnerability originates when a networked system or product performs an...

Linux kernel buffer overflow vulnerability (CNVD-2020-33664)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer overflow vulnerability exists in the gadgetdevdescUDCstore file in drivers/usb/gadget/configfs.c file in Linux kernel 5.6.13 and earlier, which stems from a...

Bitcoin Core version 0.15.1 buffer overflow

Bitcoin is an e-currency created with open source P2P software. A buffer error vulnerability exists in bitcoind and Bitcoin-Qt versions prior to 0.15.1. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resultin...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-28143)

NETGEAR D7800 and others are products of NETGEAR Corporation.NETGEAR D7800 is a wireless modem.NETGEAR R7500 is a wireless router.NETGEAR WNDR4300 is a wireless router.NETGEAR WNDR4300 is a wireless router. A cross-site scripting vulnerability exists in multiple NETGEAR products. The vulnerabilit...

NETGEAR WAC510 Cross-Site Scripting Vulnerability (CNVD-2020-27296)

The NETGEAR WAC510 is a wireless access point AP from NETGEAR. A cross-site scripting vulnerability exists in the NETGEAR WAC510 prior to version 8.0.1.3, which stems from a lack of proper validation of client-side data by the WEB application and can be exploited by an attacker to execute...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-27211)

NETGEAR RBK20 and others are a wireless router from NETGEAR. A cross-site scripting vulnerability exists in multiple NETGEAR products, which stems from a lack of proper validation of client data by a WEB application and can be exploited by an attacker to execute client code...

CVE-2020-10611

Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type confusion condition. Authentication is not required to exploit this...

CloudBees jenkins Queue cleanup plugin cross-site scripting vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Queue cleanup Plugin is used in one of the...

HDF5 Buffer Overflow Vulnerability (CNVD-2020-22284)

HDF5 is a suite of tools for managing and storing different types of data. The product supports managing, manipulating, viewing and analyzing data and generating files in portable formats. A buffer overflow vulnerability exists in the 'Decompress' function of the decompress.c file in HDF5 1.12.0...

Libnsgif Buffer Overflow Vulnerability

Libnsgif is a decoding library for GIF image file format written in C language. A buffer overflow vulnerability exists in the 'gifnextLZW' function of the libnsgif.c file in Libnsgif version 0.1.2. The vulnerability stems from a networked system or product performing operations in memory without...

Samsung Galaxy 10 Buffer Overflow Vulnerability

Samsung Galaxy 10 is a smartphone from Samsung, South Korea. A buffer overflow vulnerability exists in the Call Control Setup message in the Samsung Galaxy 10. The vulnerability stems from a networked system or product performing operations on memory without properly validating data boundaries,...

Nextcloud Data Forgery Issue Vulnerability

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. Nextcloud is vulnerable to a data forgery issue. The vulnerability arises from a network system or product that does not adequately validate the origin or...

Zimbra Collaboration Cross-Site Scripting Vulnerability (CNVD-2020-05087)

Zimbra Collaboration is a suite of email and collaboration solutions from Zimbra USA. The solution offers email, contacts, calendaring, file sharing, social networking, and more. A cross-site scripting vulnerability exists in Zimbra Collaboration. The vulnerability stems from the WEB application...

CVE-2019-13334

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Open-School Community Edition Cross-Site Scripting Vulnerability

Open-School is a web-based school management software. The software offers online billing, attendance and online library.Open-School Community Edition is the community edition of Open-School. A cross-site scripting vulnerability exists in Open-School Community Edition version 2.2. The vulnerabili...

libIEC61850 Heap Buffer Overflow Vulnerability

libIEC61850 is an open source library for the IEC 61850 protocol. A heap buffer overflow vulnerability exists in the 'MmsValuedecodeMmsData' function in the mms/isomms/server/mmsaccessresult.c file in libIEC61850 1.4.0 and earlier. The vulnerability stems from a lack of proper validation of clien...

Typora Cross-Site Scripting Vulnerability (CNVD-2020-03714)

Typora is an editor. A cross-site scripting vulnerability in Typora 0.9.9.31.2 and earlier macOS and 0.9.81 and earlier Linux, which stems from a lack of proper validation of client-side data by the WEB application, can be exploited by an attacker to execute client-side code...