Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.2 security update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.3.2 (RHSA-2020:3463)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3463 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

CheckXSS - Detect XSS vulnerability in Web Applications

DetectXSS vulnerability in Web Applications Screenshots Easy Installation As simple as below, Just one line of code: curl -L -s https://raw.githubusercontent.com/Jewel591/CheckXSS/master/docs/install.sh|bash Usage Instructions python3.6 checkxss.py -h Support POST and GET request methods, support...

Security Bulletin: WebSphere Application Server which is shipped as a component of IBM Cloud Pak for Applications is vulnerable to a remote code execution vulnerability (CVE-2020-4589)

Summary WebSphere Application Server is shipped as a component of IBM Cloud Pak for Applications. Information about security vulnerabilities affecting WebSphere Application Server have been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

CVE-2020-13290

In GitLab before 13.0.12, 13.1.6, and 13.2.3, improper access control was used on the Applications page...

CVE-2020-13290

In GitLab before 13.0.12, 13.1.6, and 13.2.3, improper access control was used on the Applications page...

CVE-2020-13290

In GitLab before 13.0.12, 13.1.6, and 13.2.3, improper access control was used on the Applications page...

Improper access control

In GitLab before 13.0.12, 13.1.6, and 13.2.3, improper access control was used on the Applications page...

UBUNTU-CVE-2020-13290

In GitLab before 13.0.12, 13.1.6, and 13.2.3, improper access control was used on the Applications page...

CVE-2020-13290

In GitLab before 13.0.12, 13.1.6, and 13.2.3, improper access control was used on the Applications page...

CVE-2020-13290

Removed by vendor...

PT-2020-13431 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 13.0.12 GitLab versions prior to 13.1.6 GitLab versions prior to 13.2.3 Description: The issue is related to improper access control on the Applications page. Recommendations: For versions prior to 13.0.12, update to...

The vulnerability of the Infrastructure component of the Oracle Financial Services Analytical Applications Infrastructure software allows a perpetrator to carry out a cross-site scenario attack.

The vulnerability of Oracle Financial Services Analytical Applications Infrastructure’s component is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to perform a cross-site scenario attack remotely...

Microsoft .NET Framework Elevation of Privilege Vulnerability (KB4569749)

This host is missing an important security update according to Microsoft KB4569749 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

The vulnerability of the Attachments/File Upload component of the Oracle Applications Framework allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Attachments/File Upload component in the Oracle Applications Framework is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows an attacker to gain access to, modify, add, or delete data using the HTTP protocol...

The vulnerability of the Page Request component in the Oracle Applications Framework software platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Page Request component in the Oracle Applications Framework is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Microsoft .NET Framework Elevation of Privilege Vulnerability (KB4569746)

This host is missing an important security update according to Microsoft KB4569746 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

The vulnerability of the Infrastructure component of the Oracle Financial Services Analytical Applications Infrastructure software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Infrastructure component of the Oracle Financial Services Analytical Applications Infrastructure software relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected...

Vulnerability of the Infrastructure component of the Oracle Financial Services Analytical Applications Infrastructure software; unauthorized access to protected information; or ability to modify, add, or delete data.

The vulnerability of Oracle Financial Services Analytical Applications Infrastructure’s component is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information or to modify, add, or...

Microsoft .NET Framework Elevation of Privilege Vulnerability (KB4569748)

This host is missing an important security update according to Microsoft KB4569748 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...