CVE-2020-9622: Out-of-bounds Read

Adobe DNG Software Development Kit SDK 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

CVE-2020-9624: Out-of-bounds Read

Adobe DNG Software Development Kit SDK 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

CVE-2020-9620: Out-of-bounds Write

Adobe DNG Software Development Kit SDK 1.5 and earlier versions have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution...

Cross site scripting

IBM DOORS Next Generation DNG/RRC 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

Cross site scripting

IBM DOORS Next Generation DNG/RRC 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2020-4297

Summary: CVE-2020-4297 affects IBM Engineering Requirements Management DOORS Next (RDNG) / DOORS Next Generation (DNG) with versions 6.0.2, 6.0.6, 6.0.6.1, and 7.0. The issue is a cross-site scripting vulnerability in the Web UI that could allow a user to embed arbitrary JavaScript, potentially a...

CVE-2020-4281

Text indicates CVE-2020-4281 is a cross-site scripting vulnerability in IBM Engineering Requirements Management DOORS Next, affecting RDNG/DOORS Next Generation versions 6.0.2, 6.0.6, 6.0.6.1, and 7.0. The Web UI can be manipulated to embed arbitrary JavaScript, potentially altering functionality...

CVE-2020-4295

IBM DOORS Next Generation DNG/RRC 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2020-4281

IBM DOORS Next Generation DNG/RRC 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2020-4295

CVE-2020-4295 affects IBM DOORS Next Generation (RDNG) / DOORS Next: versions 6.0.2, 6.0.6, 6.0.6.1, and 7.0 are vulnerable to cross-site scripting in the Web UI, allowing an attacker to embed arbitrary JavaScript and potentially disclose credentials within a trusted session. The root cause is a ...

CVE-2020-4281: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2020-4297: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2020-4295: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

Adobe DNG Software Development Kit Buffer Overflow Vulnerability (CNVD-2020-38185)

Adobe DNG Software Development Kit SDK is a software development kit that provides the ability to read and write DNG files from the American company Audobee Adobe. A buffer overflow vulnerability exists in the Adobe DNG Software Development Kit. An attacker could exploit this vulnerability to...

Adobe DNG Software Development Kit Buffer Overflow Vulnerability (CNVD-2020-38182)

Adobe DNG Software Development Kit SDK is a software development kit that provides the ability to read and write DNG files from the American company Audobee Adobe. A buffer overflow vulnerability exists in the Adobe DNG Software Development Kit. An attacker could exploit this vulnerability to...

Adobe DNG Software Development Kit Buffer Overflow Vulnerability (CNVD-2020-38183)

Adobe DNG Software Development Kit SDK is a software development kit that provides the ability to read and write DNG files from the American company Audobee Adobe. A buffer overflow vulnerability exists in the Adobe DNG Software Development Kit. An attacker could exploit this vulnerability to...

Adobe DNG Software Development Kit Buffer Overflow Vulnerability (CNVD-2020-38188)

Adobe DNG Software Development Kit SDK is a software development kit that provides the ability to read and write DNG files from the American company Audobee Adobe. A buffer overflow vulnerability exists in the Adobe DNG Software Development Kit. An attacker could exploit this vulnerability to...

Adobe DNG Software Development Kit Buffer Overflow Vulnerability (CNVD-2020-38189)

Adobe DNG Software Development Kit SDK is a software development kit that provides the ability to read and write DNG files from the American company Audobee Adobe. A buffer overflow vulnerability exists in the Adobe DNG Software Development Kit. An attacker could exploit this vulnerability to...

Adobe DNG Software Development Kit Buffer Overflow Vulnerability (CNVD-2020-38187)

Adobe DNG Software Development Kit SDK is a software development kit that provides the ability to read and write DNG files from the American company Audobee Adobe. A buffer overflow vulnerability exists in the Adobe DNG Software Development Kit. An attacker could exploit this vulnerability to...

May 2020 Patch Tuesday – 111 Vulns, 16 Critical, SharePoint, VS Code, Adobe Patches

Continuing the trend of large Microsoft Patch Tuesdays, this month’s addresses 111 vulnerabilities with 16 of them labeled as Critical. The 16 Critical vulnerabilities cover SharePoint, Browsers, Scripting Engines, Media Foundation, Microsoft Graphics, Microsoft Color Management, and the VS Code...