4885 matches found
libsvg Heap Buffer Overflow DoS
The vulnerability of the function boxblurline in the vector graphics rendering library librsvg is related to errors that occur during the division by zero operations. Exploiting this vulnerability could allow a malicious actor to cause a service failure by using a specially created SVG file...
CVE-2020-17489
An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, the password box from the login dialog reappears with the password still visible. If the user had decided to have the password shown in cleartext at login time, it is then visibl...
CVE-2020-16134
An issue was discovered on Swisscom Internet Box 2, Internet Box Standard, Internet Box Plus prior to 10.04.38, Internet Box 3 prior to 11.01.20, and Internet Box light prior to 08.06.06. Given the user-configurable credentials for the local Web interface or physical access to a device's plus or...
Design/Logic Flaw
An issue was discovered on Swisscom Internet Box 2, Internet Box Standard, Internet Box Plus prior to 10.04.38, Internet Box 3 prior to 11.01.20, and Internet Box light prior to 08.06.06. Given the user-configurable credentials for the local Web interface or physical access to a device's plus or...
CVE-2020-16134
An issue was discovered on Swisscom Internet Box 2, Internet Box Standard, Internet Box Plus prior to 10.04.38, Internet Box 3 prior to 11.01.20, and Internet Box light prior to 08.06.06. Given the user-configurable credentials for the local Web interface or physical access to a device's plus or...
CVE-2020-16134
Affected products: Swisscom Internet Box 2, Internet Box Standard, Internet Box Plus prior to 10.04.38, Internet Box 3 prior to 11.01.20, and Internet Box light prior to 08.06.06. Vulnerability: an attacker with (user-configurable) local Web interface credentials or physical access to the device’...
CVE-2020-16134: Undefined Security Weakness
An issue was discovered on Swisscom Internet Box 2, Internet Box Standard, Internet Box Plus prior to 10.04.38, Internet Box 3 prior to 11.01.20, and Internet Box light prior to 08.06.06. Given the user-configurable credentials for the local Web interface or physical access to a device's plus or...
PT-2020-14767
Name of the Vulnerable Software and Affected Versions Swisscom Internet Box 2 versions prior to 10.04.38 Swisscom Internet Box Standard versions prior to 10.04.38 Swisscom Internet Box Plus versions prior to 10.04.38 Swisscom Internet Box 3 versions prior to 11.01.20 Swisscom Internet Box light...
Design/Logic Flaw
An attacker with access to an InMail voicemail box equipped with the find me/follow me feature on Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices, may access the system's administration modem...
CVE-2019-20032
An attacker with access to an InMail voicemail box equipped with the find me/follow me feature on Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices, may access the system's administration modem...
pdfbox: unbounded computation in parser resulting in a denial of service
In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree...
Kali-Linux-Tools-Interface - Graphical Web Interface Developed To Facilitate The Use Of Security Information Tools
A graphical interface to use information security tools by the browser. Getting Started Kali Linux Tools Interface is a graphical interface to use information security tools by the browser. The project uses the Kali Linux tools as a reference because it is the distribution that has the largest...
Diebold ATM Terminals Jackpotted Using Machine’s Own Software
Cybercriminals are using software from leading ATM manufacturer Diebold in a series of hacks against cash terminals across Europe, forcing the machines to dispense cash to crooks. Criminals using a black-box device common with these type of attacks have increased their activity across Europe by...
CVE-2020-15537
An issue was discovered in the Vanguard plugin 2.1 for WordPress. XSS can occur via the mails/new title field, a product field to the p/ URI, or the Products Search box...
CVE-2020-15537: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the Vanguard plugin 2.1 for WordPress. XSS can occur via the mails/new title field, a product field to the p/ URI, or the Products Search box...
AVM FRITZ!Box 7581 and 7582 < 7.13 Information Disclosure Vulnerability (Kr00k)
AVM FRITZ!Box 7581 and 7582 devices are prone to an information disclosure vulnerability dubbed SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Cross site scripting
CALDERA 2.7.0 allows XSS via the Operation Name box...
CVE-2020-14462
CALDERA 2.7.0 allows XSS via the Operation Name box...
CVE-2020-14462: Improper Neutralization of Input During Web Page Generation
CALDERA 2.7.0 allows XSS via the Operation Name box...
PT-2020-14022
Name of the Vulnerable Software and Affected Versions CALDERA version 2.7.0 Description The issue allows for cross-site scripting XSS attacks via the Operation Name box. Recommendations For CALDERA version 2.7.0, update to a version that fixes this issue, however at the moment, there is no...