7758 matches found
calculitineraires.fr Cross Site Scripting vulnerability OBB-1269371
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-15637
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...
CVE-2020-9697
Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a disclosure of sensitive data vulnerability. Successful exploitation could lead to memory leak...
CVE-2020-9697
Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have a disclosure of sensitive data vulnerability. Successful exploitation could lead to memory leak...
The vulnerability of the implementations of grub_cmd_initrd and grub_initrd_init, the Grub2 operating system loaders, allows an attacker to access confidential data, compromise data integrity, and cause service failures.
The vulnerability of the implementations of grubcmdinitrd and grubinitrdinit, which are used by the Grub2 operating system loader, is related to the introduction of a large number of arguments into the initrd command in 32-bit architectures. Exploiting this vulnerability allows an attacker to gai...
Directory Traversal Vulnerability in PHPMyWind
PHPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . PHPMyWind has a directory traversal vulnerability that can be exploited by attackers to obtain sensitive information...
The vulnerability of the Coturn web server involves an operation that goes beyond the allowed buffer data limits. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Coturn web server is related to the execution of operations that exceed the allowable buffer data limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
christiansenaccounting.com Cross Site Scripting vulnerability OBB-1258203
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
The vulnerability of the s390/s390x memory controller component in Linux operating systems allows attackers to disclose sensitive information that should be protected.
The vulnerability of the s390/s390x memory controller component in Linux operating systems is related to incorrect handling of zero bytes or Nul characters during data exchange. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security...
Information disclosure
Broker Protocol messages in Teradici PCoIP Standard Agent for Windows and Graphics Agent for Windows prior to 20.04.1 are not cleaned up in server memory, which may allow an attacker to read confidential information from a memory dump via forcing a crashing during the single sign-on procedure...
PT-2020-3670 · Microsoft · Windows +1
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing an attacker to disclose protected information using a specially crafted application. An authenticated attacker could exploit th...
CVE-2020-15647
A Content Provider in Firefox for Android allowed local files accessible by the browser to be read by a remote webpage, leading to sensitive data disclosure, including cookies for other origins. This vulnerability affects Firefox for Android...
CVE-2020-15647
A Content Provider in Firefox for Android allowed local files accessible by the browser to be read by a remote webpage, leading to sensitive data disclosure, including cookies for other origins. This vulnerability affects Firefox for Android...
Design/Logic Flaw
A Content Provider in Firefox for Android allowed local files accessible by the browser to be read by a remote webpage, leading to sensitive data disclosure, including cookies for other origins. This vulnerability affects Firefox for Android...
CVE-2020-15647
A Content Provider in Firefox for Android allowed local files accessible by the browser to be read by a remote webpage, leading to sensitive data disclosure, including cookies for other origins. This vulnerability affects Firefox for Android...
CVE-2020-15647
The CVE-2020-15647 issue affects Mozilla Firefox for Android prior to 68.10.1. Root cause: a Content Provider in Firefox for Android allowed local files accessible by the browser to be read by remote web pages, enabling disclosure of sensitive data including cookies for other origins. Impact: sen...
CVE-2020-15647
A Content Provider in Firefox for Android allowed local files accessible by the browser to be read by a remote webpage, leading to sensitive data disclosure, including cookies for other origins. This vulnerability affects Firefox for Android...
CVE-2020-15647
A Content Provider in Firefox for Android allowed local files accessible by the browser to be read by a remote webpage, leading to sensitive data disclosure, including cookies for other origins. This vulnerability affects Firefox for Android...
The vulnerability of the WebSQL module in Google Chrome browser allows attackers to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of Google Chrome’s WebSQL module relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures through a specially created HTML page...
IBM Cognos Analytics XML External Entity Injection Vulnerability
IBM Cognos Analytics is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. A security vulnerability exists...