Opencast Trust Management Issues Vulnerabilities

Opencast is a free and open source video management solution that is scalable, customizable and low cost. A trust management issue vulnerability exists in Opencast versions prior to 7.6 and prior to 8.1. The vulnerability stems from the lack of an effective trust management mechanism in a network...

Bitdefender Antivirus for Mac Permission License and Access Control Issues Vulnerability (CNVD-2020-52440)

SOFTWIN BitDefender Antivirus is a suite of antivirus programs from the Romanian company SOFTWIN. A vulnerability exists in BDLDaemon in versions prior to Bitdefender Antivirus for Mac 8.0.0 with privilege permission and access control issues. The vulnerability stems from a lack of effective...

JetBrains IntelliJ IDEA Operating System Command Injection Vulnerability

JetBrains IntelliJ IDEA is a Czech company JetBrains set of integrated development environment for the Java language . An operating system command injection vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2019.3. The vulnerability stems from the lack of an effective trust...

Google Chrome HTML Validator Bypass Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An HTML validator bypass vulnerability exists in Google Chrome versions prior to 80.0.3987.87. The vulnerability stems from an improper implementation of Blink in...

Google Chrome Cross-Origin Data Leakage Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A cross-origin data leakage vulnerability exists in Google Chrome versions prior to 80.0.3987.87. The vulnerability stems from an improper implementation of CORS in...

Google Chrome Heap Corruption Vulnerability (CNVD-2020-05134)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A heap corruption vulnerability exists in Google Chrome versions prior to 80.0.3987.87. The vulnerability stems from insufficient data validation of streams in Goog...

CVE-2019-19800

Zoho ManageEngine Applications Manager 14 before 14520 allows a remote unauthenticated attacker to disclose OS file names via FailOverHelperServlet...

CVE-2019-20104

The OpenID client application in Atlassian Crowd before version 3.6.2, and from version 3.7.0 before 3.7.1 allows remote attackers to perform a Denial of Service attack via an XML Entity Expansion vulnerability...

Cross site request forgery (csrf)

SysJust Syuan-Gu-Da-Shih, versions before 20191223, contain vulnerability of Request Forgery, allowing attackers to launch inquiries into network architecture or system files of the server via forged inquests...

PT-2020-3610 · Ipmitool +6 · Ipmitool +6

Name of the Vulnerable Software and Affected Versions: ipmitool versions prior to 1.8.19 Description: The issue arises from multiple functions in ipmitool neglecting proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code...

CVE-2019-17103

An Incorrect Default Permissions vulnerability in the BDLDaemon component of Bitdefender AV for Mac allows an attacker to elevate permissions to read protected directories. This issue affects: Bitdefender AV for Mac versions prior to 8.0.0...

CVE-2020-3134

A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of zip files. An...

PT-2021-2037 · Node.Js +8 · Node.Js +8

Name of the Vulnerable Software and Affected Versions: Node.js versions prior to 10.23.1 Node.js versions prior to 12.20.1 Node.js versions prior to 14.15.4 Node.js versions prior to 15.5.1 Description: The issue is related to a use-after-free bug in the TLS implementation of Node.js. When writin...

Norton Power Eraser Elevation of Privilege Vulnerability

Norton Power Eraser is a free virus removal tool that targets and destroys threats to your computer. An elevation of privilege vulnerability exists in versions prior to Norton Power Eraser 5.3.0.67. An attacker could exploit this vulnerability to gain unauthorized access to resources...

Cerberus FTP Server Cross-Site Scripting Vulnerability (CNVD-2020-07242)

Cerberus FTP Server is a multi-channel Windows FTP server, in addition to containing regular FTP features, it also provides users with file access and management privileges, connection limitations, time, IP access, multi-path priority settings and more. A cross-site scripting vulnerability exists...

Google Chromium speech recognizer component resource management error vulnerability (CNVD-2020-02982)

Google Chromium is an open source web browser from Google, USA. speech recognizer is one of the speech recognition components. A resource management error vulnerability exists in the speech recognizer component in Google Chromium versions prior to 79.0.3945.130. An attacker could exploit this...

Oracle VM VirtualBox Unauthorized Access Vulnerability (CNVD-2020-04040)

Oracle VM VirtualBox is a cross-platform virtualization software for x86 systems. A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 5.2.36, 6.0.16, and 6.1.2. An attacker could exploit the vulnerability to access critical data affecting confidentialit...

Oracle VM VirtualBox Unauthorized Access Vulnerability (CNVD-2020-04048)

Oracle VM VirtualBox is a cross-platform virtualization software for x86 systems. A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 5.2.36, 6.0.16, and 6.1.2. An attacker could exploit the vulnerability to gain unauthorized access to critical data...

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2020-04034)

Oracle VM VirtualBox is a cross-platform virtualization software for x86 systems. A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 5.2.36, 6.0.16, and 6.1.2. An attacker could exploit the vulnerability to compromise confidentiality, integrity, and...

PT-2020-19376 · WordPress · Learndash Lms

Name of the Vulnerable Software and Affected Versions: LearnDash LMS plugin versions prior to 3.1.2 Description: The issue allows for XSS via the ld-profile search field. Recommendations: For versions prior to 3.1.2, update to version 3.1.2 or later to resolve the issue...