4616 matches found
sane-backends: Heap buffer overflow in esci2_img
A flaw was found in sane-backends in versions prior to 1.0.30. A heap buffer overflow in the esci2img function could lead to a remote code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
CVE-2020-12426
Mozilla developers and community members reported memory safety bugs present in Firefox 77. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 78...
CVE-2020-12404
For native-to-JS bridging the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token could leak when used for downloading files. This vulnerability affects Firefox for iOS 26...
CMSUno Cross-Site Request Forgery Vulnerability
CMSUno is a tool for creating single-page responsive websites by French software developer Jacques Malgrange. A cross-site request forgery vulnerability exists in versions of CMSUno prior to 1.6.1. The vulnerability stems from a WEB application that does not adequately validate that a request is...
CVE-2020-15573
SolarWinds Serv-U File Server before 15.2.1 has a "Cross-script vulnerability," aka Case Numbers 00041778 and 00306421...
McAfee Total Protection Elevation of Privilege Vulnerability (CNVD-2020-53310)
McAfee Total Protection MTP is a suite of antivirus software from the American company McAfee. An elevation of privilege vulnerability exists in versions prior to McAfee MTP 16.0.R26, which can be exploited by a local attacker to unauthoritatively delete files via a malicious script or program...
Cisco Digital Network Architecture Center Information Disclosure Vulnerability (CNVD-2020-45582)
Cisco Digital Network Architecture Center DNA Center is a set of digital network architecture solutions from the U.S. company Cisco Cisco. The program can extend and protect devices, applications, etc. within the network. An information disclosure vulnerability exists in Cisco DNA Center versions...
SQLite Buffer Overflow Vulnerability (CNVD-2020-52847)
SQLite is the United States D. Richard Hipp software developers of a set of C-based open source embedded relational database management system. The system is characterized by independence, isolation, cross-platform and so on. A buffer overflow vulnerability exists in multiSelectOrderBy in version...
CVE-2020-4028
Versions before 8.9.1, Various resources in Jira responded with a 404 instead of redirecting unauthenticated users to the login page, in some situations this may have allowed unauthorised attackers to determine if certain resources exist or not through an Information Disclosure vulnerability...
CVE-2019-20409
The way in which velocity templates were used in Atlassian Jira Server and Data Center prior to version 8.8.0 allowed remote attackers to gain remote code execution if they were able to exploit a server side template injection vulnerability...
FreeRDP Buffer Overflow Vulnerability (CNVD-2020-35694)
FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in versions prior to FreeRDP 2.1.2. The vulnerability stems from a networked system or product performing operations in memory without properly validating data...
Unspecified Vulnerability in Mattermost Server (CNVD-2020-35366)
Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 5.13.0. No detailed vulnerability details are provided at this time...
Mattermost Server Cross-Site Scripting Vulnerability (CNVD-2020-35463)
Mattermost Server is the United States Mattermost company's set of open source messaging platform. A cross-site scripting vulnerability exists in Mattermost Server versions prior to 3.0.0. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An...
Unspecified Vulnerability in Mattermost Server
Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in the WebSocket functionality in Mattermost Server versions prior to 3.6.2, which stems from the program not following the same-origin policy. No details of the...
nodejs-chownr: TOCTOU vulnerability in `chownr` function in chownr.js
A TOCTOU issue in the chownr package before 1.1.0 for Node.js 10.10 could allow a local attacker to trick it into descending into unintended directories via symlink attacks...
CVE-2020-14439
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before...
CVE-2020-14428
Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25,...
DEBIAN-CVE-2020-14404
An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rre.c allows out-of-bounds access via encodings...