CVE-2020-14361

A flaw was found in X.Org Server. An Integer underflow leading to heap-buffer overflow may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

PT-2020-3965 · Fasterxml +3 · Jackson-Databind +3

Name of the Vulnerable Software and Affected Versions: FasterXML jackson-databind versions 2.x prior to 2.9.10.6 Description: The issue is related to the mishandling of the interaction between serialization gadgets and typing in FasterXML jackson-databind, specifically with the component...

CVE-2020-15811

A flaw was found in squid. Due to incorrect data validation, an HTTP Request Splitting attack against HTTP and HTTPS traffic is possible leading to cache poisoning. The highest threat from this vulnerability is to data confidentiality and integrity. Mitigation Disable the relaxed HTTP parser in...

CVE-2020-15810

A flaw was found in squid. Due to incorrect data validation, a HTTP Request Smuggling attack against HTTP and HTTPS traffic is possible leading to cache poisoning. The highest threat from this vulnerability is to data confidentiality and integrity. Mitigation Disable the relaxed HTTP parser in...

CVE-2020-8624

A flaw was found in bind. Updates to "Update-policy" rules of type "subdomain" are treated as if they were of type "zonesub" which allows updates to all parts of the zone along with the intended subdomain. The highest threat from this vulnerability is to data integrity...

The vulnerability of the WordPress website content management system, related to the redirection of URLs to an unreliable website, allows attackers to access sensitive data and compromise its integrity.

The vulnerability of the WordPress website content management system is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to gain access to confidential data and compromise its integrity...

The vulnerability of Grub2 operating system loaders, related to operations occurring outside the data buffer, allows attackers to influence data integrity or cause service failures.

The vulnerability of Grub2 operating system loaders is related to the issue of operations going beyond the data buffer when processing symbolic links. Exploiting this vulnerability can allow an attacker to influence the integrity of data or cause service failures...

The vulnerability of the RoundCube Webmail email client, related to deficiencies in the security measures used to protect web page structures, allows attackers to compromise data integrity.

The vulnerability of the RoundCube Webmail email client is related to deficiencies in the security measures used to protect website structures. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

The vulnerability of the WordPress website content management system lies in the lack of measures to eliminate script-related HTML tags on web pages, allowing attackers to compromise data integrity.

The vulnerability of the WordPress website content management system is related to the failure to remove script-related HTML tags from web pages. Exploiting this vulnerability allows a malicious actor to compromise data integrity...

The vulnerability in webmail for AJAX Roundcube-based IMAP servers relates to deficiencies in the security measures used to protect website structures. This vulnerability allows attackers to compromise data integrity.

The vulnerability of webmail for IMAP servers based on AJAX Roundcube is related to deficiencies in the security measures used to protect website structures. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

The vulnerability of Mailman, a software for managing email distributions, stems from the lack of protective measures taken to safeguard the website structure. This vulnerability allows attackers to compromise the integrity of the data.

The vulnerability of the Mailman email distribution software is related to the lack of protective measures for website structures. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

The vulnerability of the qmail-verify module in the netqmail email client allows a hacker to compromise data integrity.

The vulnerability of the qmail-verify module in the netqmail email client is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability allows an attacker to compromise the integrity of data...

The vulnerability of the RoundCube Webmail email client, related to deficiencies in the security measures used to protect web page structures, allows attackers to compromise data integrity.

The vulnerability of the RoundCube Webmail email client is related to deficiencies in the security measures used to protect website structures. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

The vulnerability of AJAX-based IMAP servers like Roundcube lies in the lack of protection for website structure, allowing attackers to compromise data integrity.

The vulnerability of AJAX-based IMAP servers like Roundcube is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows an attacker to compromise the integrity of data...

The vulnerability of reverse proxies and proxy redirection mechanisms in the Apache Traffic Server allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of reverse proxies and proxy redirection in the Apache Traffic Server is related to inconsistent interpretation of HTTP requests. Exploiting this vulnerability can allow a remote attacker to access sensitive data, compromise its integrity, and cause service failures...

The vulnerability in the implementation of the read_section_as_string() function of the Grub2 operating system allows a attacker to influence data integrity or cause service failures.

The vulnerability of the readsectionasstring function in the Grub2 operating system’s loader is related to the issue of data operations going beyond the buffer boundaries. This is because the maximum length of a UINT32MAX is 1 byte. Exploiting this vulnerability could allow an attacker to influen...

The vulnerability of the WordPress website content management system allows for bypassing authentication processes through alternative pathways or channels. This enables attackers to access sensitive data, compromise its integrity, and cause service interruptions.

The vulnerability of the WordPress website content management system is related to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the WordPress website content management system lies in the lack of measures to eliminate script-related HTML tags on web pages, allowing attackers to compromise data integrity.

The vulnerability of the WordPress website content management system is related to the failure to remove script-related HTML tags from web pages. Exploiting this vulnerability allows a malicious actor to compromise data integrity...

The vulnerability of the WordPress website content management system lies in the lack of measures to eliminate script-related HTML tags on web pages, allowing attackers to compromise data integrity.

The vulnerability of the WordPress website content management system is related to the failure to remove scipt-related HTML tags from web pages. Exploiting this vulnerability could allow a malicious actor to compromise data integrity...

A flaw was found in grub2 prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB verification process. This flaw also allows the bypass of Secure Boot protections. In order to load an untrusted or modified kernel an attacker would first need to establish access to the system such as gaining physical access obtain the ability to alter a pxe-boot network or have remote access to a networked system with root access. With this access an attacker could then craft a string to cause a buffer overflow by injecting a malicious payload that leads to arbitrary code execution within GRUB. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

...