WordPress WPForms Contact Form Plugin Cross-Site Scripting Vulnerability

WordPress is a set of blogging platform developed by WordPress Foundation using PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WPForms Contact Form is one of the contact form builder plugins. A cross-site scripting vulnerability exists in WordPres...

UniValue Denial of Service Vulnerability

UniValue is a generic value class that supports JSON encoding and decoding. A security vulnerability exists in UniValue::read in versions prior to UniValue 1.0.5. An attacker can exploit this vulnerability to cause a denial of service with input data...

fastify-multipart resource management error vulnerability

fastify-multipart is a package that supports parsing multiple content types. A resource management error vulnerability exists in versions prior to fastify-multipart 1.0.5, which can be exploited to crash an application with a specially crafted request...

CVE-2020-1709

A vulnerability was found in all openshift/mediawiki 4.x.x versions prior to 4.3.0, where an insecure modification vulnerability in the /etc/passwd file was found in the openshift/mediawiki. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their...

Red Hat newlib libc library code issue vulnerability

Red Hat is the world's leading provider of enterprise open source solutions using a community-supported approach to delivering high-performance Linux, cloud, container and Kubernetes technologies. A code issue vulnerability exists in the 'mdiff' function in newlib libc library versions prior to...

Red Hat newlib libc library code issue vulnerability (CNVD-2020-19537)

Red Hat is the world's leading provider of enterprise open source solutions using a community-supported approach to delivering high-performance Linux, cloud, container and Kubernetes technologies. A code issue vulnerability exists in the 'mdiff' function in newlib libc library versions prior to...

Cisco SD-WAN Solution Buffer Overflow Vulnerability (CNVD-2020-19235)

Cisco SD-WAN Solution is a set of network extension solutions from Cisco. A buffer overflow vulnerability exists in Cisco SD-WAN Solution Releases prior to 19.2.2, which stems from a failure to adequately validate input. A local attacker could exploit this vulnerability by sending specially craft...

Bitcoin Core Input Validation Error Vulnerability

Bitcoin Core is an open source client for verifying the validity of blockchain transactions. A security vulnerability exists in versions of Bitcoin Core prior to 0.14 that stems from an automated system that relies solely on SPV proofs to validate transactions. An attacker could exploit the...

cPanel Stored Cross-Site Scripting Vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. A stored cross-site scripting vulnerability exists in cPanel versions prior to 82.0.18. The vulnerability can be exploited by an attacker to conduct a cross-site scripting attack via a WHM backup restore...

UBUNTU-CVE-2019-19209

Dolibarr ERP/CRM before 10.0.3 allows SQL Injection...

CVE-2020-0872

A remote code execution vulnerability exists in Application Inspector version v1.0.23 or earlier when the tool reflects example code snippets from third-party source files into its HTML output, aka 'Remote Code Execution Vulnerability in Application Inspector'...

UBUNTU-CVE-2020-6792

When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents. This vulnerability affects Thunderbird 68.5...

CVE-2020-1844

PCManager with versions earlier than 10.0.5.51 have a privilege escalation vulnerability in Huawei PCManager products. An authenticated, local attacker can perform specific operation to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege...

Google Chrome Information Disclosure Vulnerability (CNVD-2020-14821)

Google Chrome is a web browser from Google, an American company. An information disclosure vulnerability exists in Google Chrome versions prior to 3.0, which stems from the program's failure to properly process XML documents. A remote attacker could exploit the vulnerability to obtain sensitive...

Apple macOS Catalina Wi-Fi Component Memory Corruption Vulnerability

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in the Wi-Fi component of Apple macOS Catalina versions prior to 10.15.3. A remote attacker could exploit the vulnerability to terminate the system or corrupt kernel...

wolfSSL buffer overflow vulnerability (CNVD-2020-13495)

wolfSSL formerly known as CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. A buffer overflow vulnerability exists in wolfSSL CyaSSL versions prior to 2.9.4. The vulnerability stems from a networked system or...

CVE-2020-9342

The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a GZIP archive. This affects versions before 17.0.605.474 on Linux of Cloud Protection For Salesforce, Email and Server Security, and Internet GateKeeper...

PrestaShop Cross-Site Scripting Vulnerability (CNVD-2020-13058)

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A cross-site scripting vulnerability exists in PrestaShop versions prior to 1.4.11. T...

Promise-probe Command Injection Vulnerability

Promise-probe is a probe module. A command injection vulnerability exists in promise-probe versions prior to 0.10.0. The vulnerability stems from a network system or product not properly filtering specific elements of externally entered data during the construction of executable commands. An...

PT-2020-10464 · Apache +5 · Mod Auth Openidc +5

Name of the Vulnerable Software and Affected Versions: mod auth openidc versions prior to 2.4.1 Description: A flaw exists in the handling of URLs with a slash and backslash at the beginning, leading to an open redirect issue. Recommendations: For versions prior to 2.4.1, update to version 2.4.1 ...