Odoo Access Control Error Vulnerability (CNVD-2020-04404)

Odoo is an Enterprise Resource Planning ERP and Customer Relationship Management CRM system from Odoo Belgium. The system is developed in Python language, PostgreSQL as the database, and includes modules for sales management, inventory management, financial management and so on. An access control...

GitLab Information Disclosure Vulnerability (CNVD-2020-12723)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in GitLab...

OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765)

Vulnerability in the Java SE product of Oracle Java SE component: Javadoc. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

DEBIAN-CVE-2018-5743

By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value for most servers. Unfortunately, the code which was intended to limit the number of...

Input validation

An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Insufficient Visual Distinction of Homoglyphs Presented to a User. IDN homographs and RTLO characters are rendered to unicode, which could be used for social...

GitLab Information Disclosure Vulnerability (CNVD-2019-30784)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Enterprise and...

4 New BlueKeep-like 'Wormable' Windows Remote Desktop Flaws Discovered

If you are using any supported version of the Windows operating system, stop everything and install the latest security updates from Microsoft immediately. Windows operating system contains four new critical wormable, remote code execution vulnerabilities in Remote Desktop Services, similar to th...

July 16, 2019—KB4507459 (OS Build 14393.3115)

None None...

Gitlab CE/EE Incorrect Access Control Vulnerability

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is the GitLab Enterprise Edition and GitLab CE is the GitLab Community Edition. An incorre...

GitLab Information Disclosure Vulnerability (CNVD-2020-22022)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Community and...

editions-verone.com Cross Site Scripting vulnerability

Security Researcher Implosion Helped patch 1639 vulnerabilities Received 7 Coordinated Disclosure badges Received 29 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting editions-verone.com website and its users. Following...

June 11, 2019—KB4503327 (OS Build 17763.557)

None None...

CVE-2019-7095

Adobe Digital Editions versions 4.5.10.185749 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2019-7095

Adobe Digital Editions versions 4.5.10.185749 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution...

Heap overflow

Adobe Digital Editions versions 4.5.10.185749 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2019-7095

Adobe Digital Editions is affected by CVE-2019-7095, a heap overflow in versions 4.5.10.185749 and earlier. The vulnerability could allow arbitrary code execution on exploitation. Remediation: update to 4.5.10.186048 (per THN ThreatPost and Red Hat/NVD references). The linked reports confirm the ...

CVE-2019-7095

Adobe Digital Editions versions 4.5.10.185749 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution...

May 23, 2019—KB4499177 (OS Build 14393.2999)

None None...

Adobe Digital Editions Heap Overflow Vulnerability

Adobe Digital Editions software offers an engaging way to help you view and manage eBooks and other digital publications. A heap overflow vulnerability exists in Adobe Digital Editions 4.5.10.185749 and earlier versions. An attacker could exploit this vulnerability to execute arbitrary code...

Adobe Digital Editions < 4.5.10.186048 Arbitrary Code Execution (APSB19-16)

The version of Adobe Digital Editions installed on the remote Windows host is prior to 4.5.10.186048. It is, therefore, affected by a vulnerability as referenced in the APSB19-16 advisory. - Adobe Digital Editions versions 4.5.10.185749 and below have a heap overflow vulnerability. Successful...