HTTP/2: flood using empty frames results in excessive resource consumption

A flaw was found in HTTP/2. Using frames with an empty payload, a flood could occur that results in excessive CPU usage and starvation of other clients. The highest threat from this vulnerability is to system availability...

LibreHealth EHR Cross-Site Request Forgery Vulnerability

LibreHealth EHR is a free open source electronic health record and medical practice management application. LibreHealth EHR 2.0.0 suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to send unintended requests to the server via an affected client...

SUSE-SU-2020:1992-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: - Update to version 2.28.3 bsc1173998: + Enable kinetic scrolling with async scrolling. + Fix web process hangs on large GitHub pages. + Bubblewrap sandbox should not attempt to bind empty paths. + Fix threading issues in the media player. +...

kernel: Indirect branch speculation can be enabled after it was force-disabled by the PR_SPEC_FORCE_DISABLE prctl command.

A flaw was found in the prctl function, where it can be used to enable indirect branch speculation after it has been disabled. This call incorrectly reports it as being 'force disabled' when it is not and opens the system to Spectre v2 attacks. The highest threat from this vulnerability is to...

kernel: Indirect branch speculation can be enabled after it was force-disabled by the PR_SPEC_FORCE_DISABLE prctl command.

A flaw was found in the prctl function, where it can be used to enable indirect branch speculation after it has been disabled. This call incorrectly reports it as being 'force disabled' when it is not and opens the system to Spectre v2 attacks. The highest threat from this vulnerability is to...

kernel: Indirect Branch Prediction Barrier is force-disabled when STIBP is unavailable or enhanced IBRS is available.

A flaw was found in the Linux kernel’s implementation of the Enhanced IBPB Indirect Branch Prediction Barrier. The IBPB mitigation will be disabled when STIBP is not available or when the Enhanced Indirect Branch Restricted Speculation IBRS is available. This flaw allows a local attacker to perfo...

kernel: Indirect branch speculation can be enabled after it was force-disabled by the PR_SPEC_FORCE_DISABLE prctl command.

A flaw was found in the prctl function, where it can be used to enable indirect branch speculation after it has been disabled. This call incorrectly reports it as being 'force disabled' when it is not and opens the system to Spectre v2 attacks. The highest threat from this vulnerability is to...

kernel: Indirect Branch Prediction Barrier is force-disabled when STIBP is unavailable or enhanced IBRS is available.

A flaw was found in the Linux kernel’s implementation of the Enhanced IBPB Indirect Branch Prediction Barrier. The IBPB mitigation will be disabled when STIBP is not available or when the Enhanced Indirect Branch Restricted Speculation IBRS is available. This flaw allows a local attacker to perfo...

kernel: Indirect Branch Prediction Barrier is force-disabled when STIBP is unavailable or enhanced IBRS is available.

A flaw was found in the Linux kernel’s implementation of the Enhanced IBPB Indirect Branch Prediction Barrier. The IBPB mitigation will be disabled when STIBP is not available or when the Enhanced Indirect Branch Restricted Speculation IBRS is available. This flaw allows a local attacker to perfo...

IBM Planning Analytics Licensing Issues Vulnerabilities

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. A security vulnerability exists in IBM Planning Analytics version 2.0, which stems from the...

commix

This is a PoC exploit for command injection attacks, specifically targeting web-based applications. The tool, named Commix, is designed to automate the process of testing web applications for command injection vulnerabilities. It can be used by web developers, penetration testers, or security...

The vulnerability of the HTTP/2 network software decoder in HAProxy allows a attacker to cause a service failure.

The vulnerability of the HTTP/2 network software decoder in HAProxy arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause a service failure using a specially created package...

envoy: Resource exhaustion when proxying HTTP/2 requests or responses with small data frames

A flaw was found in Envoy in versions through 1.14.1. An excessive amount of memory may be consumed when proxying HTTP/2 requests and responses that contain many small e.g. 1 byte data frames. The highest threat from this vulnerability is to system availability...

SUSE-SU-2020:1864-1 Security update for nasm

nasm was updated to version 2.14.02: Fix crash due to multiple errors or warnings during the code generation pass if a list file is specified. Create all system-defined macros defore processing command-line given preprocessing directives -p, -d, -u, --pragma, --before. If debugging is enabled,...

We-COM OpenData CMS SQL Injection Vulnerability

We-COM OpenData CMS is a Content Management System CMS from the Italian company We-COM. A SQL injection vulnerability exists in We-COM OpenData CMS version 2.0, which arises from a lack of validation of externally entered SQL statements in database-based applications and can be exploited by an...

We-COM Municipality portal CMS SQL Injection Vulnerability

We-COM Municipality portal CMS is a Content Management System CMS from the Italian company We-COM. A SQL injection vulnerability exists in We-COM Municipality portal CMS version 2.1.x. The vulnerability stems from a lack of validation of externally-entered SQL statements in a database-based...

Zhenjiang City Yunyou Network Technology Co., Ltd. Yunyou CMS v2.0.8 exists SQL injection vulnerability

CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. Zhenjiang City Yunyou Network Technology Co., Ltd. Yunyou CMS v2.0.8 SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive...

nghttp2: overly large SETTINGS frames can lead to DoS

A resource consumption vulnerability was found in nghttp2. This flaw allows an attacker to repeatedly construct an overly large HTTP/2 SETTINGS frame with a length of 14,400 bytes that causes excessive CPU usage, leading to a denial of service...

XSS Vulnerability in 115cms 2.0

115cms is developed with the face of the most popular current ThinkPHP framework, which is an efficient and open source content management system. 115cms 2.0 has an XSS vulnerability that can be exploited by attackers to obtain an administrator cookie...

PT-2020-14083 · Ocs Inventory · Ocs Inventory Ng

Name of the Vulnerable Software and Affected Versions: OCS Inventory NG version 2.7 Description: The issue allows for Remote Command Execution via shell metacharacters in the require/commandLine/CommandLine.php file. This is due to the mishandling of the mib file in plugins/main sections/ms...