ABB System 800xA Batch Management Privilege Permission and Access Control Issues Vulnerability

ABB System 800xA Batch Management is an application software package from ABB Switzerland for configuring, scheduling and managing batch operations. A vulnerability in privilege permission and access control issues exists in ABB System 800xA Batch Management all versions, which can be exploited b...

UBUNTU-CVE-2020-10944

HashiCorp Nomad and Nomad Enterprise up to 0.10.4 contained a cross-site scripting vulnerability such that files from a malicious workload could cause arbitrary JavaScript to execute in the web UI. Fixed in 0.10.5...

Fortinet FortiMail and FortiVoice Entreprise Authorization Issues Vulnerability

Fortinet FortiMail and FortiVoice Entreprise are both products of the U.S. Fiat Fortinet, Inc. FortiMail is a suite of e-mail security gateway products. FortiMail is an email security gateway product that provides email security and data protection, etc. FortiVoice Entreprise is an enterprise...

CVE-2020-9294

An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a remote unauthenticated attacker to access the system as a legitimate user by requesting a password change via the user interface...

Authentication bypass in FortiMail and FortiVoiceEntreprise

An improper authentication vulnerability in FortiMail and FortiVoiceEntreprise may allow a remote unauthenticated attacker to access the system as a legitimate user by requesting a password change via the user interface...

openSUSE Security Update : crawl (openSUSE-2020-549)

This update for crawl fixes the following issues : - CVE-2020-11722: Fixed a remote code evaluation issue with lua loadstring boo1169381 Update to version 0.24.0 - Vampire species simplified - Thrown weapons streamlined - Fedhas reimagined - Sif Muna reworked Update to version 0.23.2 - Trap syste...

The vulnerability of the user interface in Google Chrome browsers allows a perpetrator to compromise data integrity.

The vulnerability of the user interface in Google Chrome browsers is related to the lack of a mechanism for checking entered data. Exploiting this vulnerability allows an attacker to affect the integrity of data by creating a malicious HTML page...

PT-2020-5588 · Fortinet · Fortivoiceentreprise +1

Name of the Vulnerable Software and Affected Versions: FortiMail versions 5.4.10 and earlier, 6.0.7 and earlier, 6.2.2 and earlier FortiVoiceEntreprise versions 6.0.0 and 6.0.1 Description: The issue is related to weaknesses in the authentication procedure of the email protection system. It may...

openSUSE: Security Advisory for crawl (openSUSE-SU-2020:0549-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:0549-1 Security update for crawl

This update for crawl fixes the following issues: CVE-2020-11722: Fixed a remote code evaluation issue with lua loadstring boo1169381 Update to version 0.24.0 Vampire species simplified Thrown weapons streamlined Fedhas reimagined Sif Muna reworked Update to version 0.23.2 Trap system overhaul Ne...

CVE-2020-5868

In BIG-IQ 6.0.0-7.0.0, a remote access vulnerability has been discovered that may allow a remote user to execute shell commands on affected systems using HTTP requests to the BIG-IQ user interface...

Improper access control

In BIG-IQ 6.0.0-7.0.0, a remote access vulnerability has been discovered that may allow a remote user to execute shell commands on affected systems using HTTP requests to the BIG-IQ user interface...

CVE-2020-5868

CVE-2020-5868 is a remote command execution vulnerability in F5 BIG‑IQ Centralized Management that leverages the Grafana component. Affected versions include BIG-IQ Centralized Management 6.0.0–6.1.0 and 7.x (e.g., 7.0.x); exploitation could allow a remote attacker to run local shell commands via...

The vulnerability of the rendering kernel of Google Chrome’s Blink web pages, related to improper restriction of the user interface frames that are displayed, allows attackers to compromise data integrity.

The vulnerability of the rendering kernel of Google Chrome’s Blink web pages is related to improper restrictions on the frames that are displayed in the user interface. Exploiting this vulnerability could allow a malicious actor to compromise data integrity through a specially created HTML page...

The vulnerability of the user interface in Google Chrome’s Omnibox allows a perpetrator to compromise data integrity.

The vulnerability of the user interface in Google Chrome’s Omnibox is related to the lack of a mechanism for verifying the entered data. Exploiting this vulnerability allows an attacker to manipulate the integrity of data by creating a malicious HTML page...

The vulnerability of Google Chrome’s user interface allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome’s user interface is related to the lack of a mechanism for checking entered data. Exploiting this vulnerability allows an attacker to affect the integrity of data by creating a malicious HTML page...

The vulnerability in the user interface of Google Chrome’s Chromium browser allows a hacker to compromise data integrity.

The vulnerability of Google Chrome’s Chromium user interface is related to improper control over access to critical resources. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

CVE-2020-11753

An issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.0. It is possible for a user with appropriate privileges to create, modify, and execute scripting tasks without use of the UI or API. NOTE: in 3.22.0, scripting is disabled by default making this not...

CVE-2019-4644

IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 170880...

CVE-2019-4749

IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 173308...