4750 matches found
MediaWiki xss vulnerability
MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki versions prior to 1.34.1. The...
CVE-2020-10203
Sonatype Nexus Repository before 3.21.2 allows XSS...
CVE-2020-10204
Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution...
GHSA-8QXJ-F9RH-9FG2 Improper Verification of Cryptographic Signature in Pure-Python ECDSA
A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...
WordPress LifterLMS Plugin Code Issue Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.LifterLMS is a learning management system plugin used in it. A code issue vulnerability exists in WordPress LifterLMS...
ImageMagick: Memory leak in the WritePDFImage function in coders/pdf.c
In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c...
CVE-2020-10825
A stack-based buffer overflow in /cgi-bin/activate.cgi while base64 decoding ticket parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request issue 3 of 3...
Nick Chan Bot Operating System Command Injection Vulnerability
Nick Chan Bot is a private Discord bot written using the discord.js library. An operating system command injection vulnerability exists in versions prior to Nick Chan Bot 1.0.0-beta. The vulnerability stems from a network system or product not properly filtering special characters, commands, etc...
WordPress WPForms Contact Form Plugin Cross-Site Scripting Vulnerability
WordPress is a set of blogging platform developed by WordPress Foundation using PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WPForms Contact Form is one of the contact form builder plugins. A cross-site scripting vulnerability exists in WordPres...
UniValue Denial of Service Vulnerability
UniValue is a generic value class that supports JSON encoding and decoding. A security vulnerability exists in UniValue::read in versions prior to UniValue 1.0.5. An attacker can exploit this vulnerability to cause a denial of service with input data...
fastify-multipart resource management error vulnerability
fastify-multipart is a package that supports parsing multiple content types. A resource management error vulnerability exists in versions prior to fastify-multipart 1.0.5, which can be exploited to crash an application with a specially crafted request...
CVE-2020-1709
A vulnerability was found in all openshift/mediawiki 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the openshift/mediawiki. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their...
Red Hat newlib libc library code issue vulnerability
Red Hat is the world's leading provider of enterprise open source solutions using a community-supported approach to delivering high-performance Linux, cloud, container and Kubernetes technologies. A code issue vulnerability exists in the 'mdiff' function in newlib libc library versions prior to...
Red Hat newlib libc library code issue vulnerability (CNVD-2020-19537)
Red Hat is the world's leading provider of enterprise open source solutions using a community-supported approach to delivering high-performance Linux, cloud, container and Kubernetes technologies. A code issue vulnerability exists in the 'mdiff' function in newlib libc library versions prior to...
Cisco SD-WAN Solution Buffer Overflow Vulnerability (CNVD-2020-19235)
Cisco SD-WAN Solution is a set of network extension solutions from Cisco. A buffer overflow vulnerability exists in Cisco SD-WAN Solution Releases prior to 19.2.2, which stems from a failure to adequately validate input. A local attacker could exploit this vulnerability by sending specially craft...
Bitcoin Core Input Validation Error Vulnerability
Bitcoin Core is an open source client for verifying the validity of blockchain transactions. A security vulnerability exists in versions of Bitcoin Core prior to 0.14 that stems from an automated system that relies solely on SPV proofs to validate transactions. An attacker could exploit the...
cPanel Stored Cross-Site Scripting Vulnerability
cPanel is a set of Web-based host control management system of the U.S. cPanel. A stored cross-site scripting vulnerability exists in cPanel versions prior to 82.0.18. The vulnerability can be exploited by an attacker to conduct a cross-site scripting attack via a WHM backup restore...
UBUNTU-CVE-2019-19209
Dolibarr ERP/CRM before 10.0.3 allows SQL Injection...
CVE-2020-0872
A remote code execution vulnerability exists in Application Inspector version v1.0.23 or earlier when the tool reflects example code snippets from third-party source files into its HTML output, aka 'Remote Code Execution Vulnerability in Application Inspector'...