166 matches found
com.adobe.documentservices:pdfservices-sdk (>=2.0.0, <=2.2.0), com.adobe.documentservices:pdftools-sdk (>=1.1.0, <=1.3.0) +484 more potentially affected by CVE-2020-10693 via org.hibernate:hibernate-validator (>=6.1.0.final, <=6.1.4.final)
org.hibernate:hibernate-validator MAVEN version =6.1.0.final, =2.0.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.2.0, =0.0.1, =1.0.14.2, =2.0, =2.0, =2.0, =2.1 and more Source cves: CVE-2020-10693 Source advisory: OSV:GHSA-RMRM-75HP-PHR2...
py vulnerable to Regular Expression Denial of Service
A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...
SUSE: Security Advisory (SUSE-SU-2020:3424-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-35284: Improper Limitation of a Pathname to a Restricted Directory
Flamingo aka FlamingoIM through 2020-09-29 allows ../ directory traversal because the only ostensibly unpredictable part of a file-transfer request is an MD5 computation; however, this computation occurs on the client side, and the computation details can be easily determined because the product'...
CVE-2020-35244: Improper Neutralization of Special Elements used in an SQL Command
Flamingo aka FlamingoIM through 2020-09-29 has a SQL injection vulnerability in UserManager::addGroup...
PT-2020-17309
Name of the Vulnerable Software and Affected Versions Flamingo aka FlamingoIM through 2020-09-29 Description The issue allows for ../ directory traversal. This is possible because the only unpredictable part of a file-transfer request, an MD5 computation, occurs on the client side. Since the...
CVE-2020-35243: Improper Neutralization of Special Elements used in an SQL Command
Flamingo aka FlamingoIM through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserInfoInDb...
CVE-2020-29651
A denial of service via regular expression in the py.path.svnwc component of py aka python-py through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality...
Security update for wpa_supplicant (moderate)
openSUSE Security Update: Security update for wpasupplicant Announcement ID: openSUSE-SU-2020:2053-1 Rating: moderate References: 1131644 1131868 1131870 1131871 1131872 1131874 1133640 1144443 1150934 1156920 1166933 1167331 930077 930078 930079 Cross-References: CVE-2015-4141 CVE-2015-4142...
aka-verlag.de Cross Site Scripting vulnerability OBB-1461362
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
PT-2020-14747
Name of the Vulnerable Software and Affected Versions dlf aka Kitodo.Presentation versions prior to 3.1.2 dlf aka Kitodo.Presentation version 2.3.1 and earlier in the 2.x branch Description The issue is related to Cross Site Scripting XSS due to the failure to properly encode URL parameters for...
CVE-2019-20783
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 North America CDMA software. The LTE protocol implementation allows a bypass of AKA Authentication and Key Agreement. The LG ID is LVE-SMP-180014 February 2019...
Authentication flaw
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 North America CDMA software. The LTE protocol implementation allows a bypass of AKA Authentication and Key Agreement. The LG ID is LVE-SMP-180014 February 2019...
CVE-2019-20783
CVE-2019-20783 affects LG mobile devices running Android 7.0–8.1 (North America CDMA). The issue is in the LTE protocol implementation, which allows a bypass of Authentication and Key Agreement (AKA). The available records (NVD, Red Hat advisory, CVE listings) describe the vulnerability and its L...
PT-2020-10756
Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS versions 7.0 through 8.1 Description An issue was discovered in the LTE protocol implementation, allowing a bypass of AKA Authentication and Key Agreement. Recommendations For Android OS versions 7.0 through...
CVE-2019-20783: Undefined Security Weakness
An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 North America CDMA software. The LTE protocol implementation allows a bypass of AKA Authentication and Key Agreement. The LG ID is LVE-SMP-180014 February 2019...
Information disclosure
An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user’s computer or data.To exploit the vulnerability, an attacker must know the memory address of where the obje...
openSUSE: Security Advisory for hostapd (openSUSE-SU-2020:0222-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2014-3856
The funced function in fish aka fish-shell 1.23.0 before 2.1.1 does not properly create temporary files, which allows local users to gain privileges via a temporary file with a predictable name...
PT-2019-14775
Name of the Vulnerable Software and Affected Versions sr freecap aka freeCap CAPTCHA extension versions 2.4.5 and below sr freecap aka freeCap CAPTCHA extension version 2.5.2 and below Description The issue allows execution of arbitrary Extbase actions, resulting in Remote Code Execution due to t...