8409 matches found
CVE-2020-6156: Heap-based Buffer Overflow
A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. To trigger this vulnerability, the victim needs to open an attacker-provided malformed file in an instance USDC file format path element token index...
PT-2020-20223
Name of the Vulnerable Software and Affected Versions Element Software versions prior to 12.2 HCI versions prior to 1.8P1 Description The issue allows an authenticated user to view sensitive information. Recommendations For Element Software versions prior to 12.2, update to version 12.2 or later...
PT-2020-20224
Name of the Vulnerable Software and Affected Versions Element Software versions prior to 12.2 HCI versions prior to 1.8P1 Description The issue allows an attacker to discover sensitive information by intercepting its transmission within an https session. Recommendations For Element Software...
Rocket.Chat: CSS Injection in Message Avatar
The custom message avatars in the Meteor.method "sendMessage" can contain inline CSS that influences the resulting HTML element rendering. Escaping the input with "none;" allows further CSS to be applied to the elements inline styles, without requiring certain characters such as whitespace...
GHSA-J977-G5VJ-J27G Cross-Site Scripting in scratch-svg-renderer
This affects the package scratch-svg-renderer before 0.2.0-prerelease.20201019174008. The loadString function does not escape SVG properly, which can be used to inject arbitrary elements into the DOM via the transformMeasurements function...
CVE-2020-28341
An issue was discovered on Samsung mobile devices with Q10.0 Exynos990 chipsets software. The S3K250AF Secure Element CC EAL 5+ chip allows attackers to execute arbitrary code and obtain sensitive information via a buffer overflow. The Samsung ID is SVE-2020-18632 November 2020...
Buffer overflow
An issue was discovered on Samsung mobile devices with Q10.0 Exynos990 chipsets software. The S3K250AF Secure Element CC EAL 5+ chip allows attackers to execute arbitrary code and obtain sensitive information via a buffer overflow. The Samsung ID is SVE-2020-18632 November 2020...
CVE-2020-28341
An issue was discovered on Samsung mobile devices with Q10.0 Exynos990 chipsets software. The S3K250AF Secure Element CC EAL 5+ chip allows attackers to execute arbitrary code and obtain sensitive information via a buffer overflow. The Samsung ID is SVE-2020-18632 November 2020...
CVE-2020-28341: Buffer Copy without Checking Size of Input
An issue was discovered on Samsung mobile devices with Q10.0 Exynos990 chipsets software. The S3K250AF Secure Element CC EAL 5+ chip allows attackers to execute arbitrary code and obtain sensitive information via a buffer overflow. The Samsung ID is SVE-2020-18632 November 2020...
PT-2020-16984
Name of the Vulnerable Software and Affected Versions Samsung mobile devices with Q10.0 Exynos990 chipsets software Description An issue allows attackers to execute arbitrary code and obtain sensitive information via a buffer overflow in the S3K250AF Secure Element CC EAL 5+ chip. Recommendations...
CVE-2020-28249
Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note...
Design/Logic Flaw
Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note...
CVE-2020-28249
Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note...
CVE-2020-28249
Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note...
CVE-2020-28249: Improper Neutralization of Input During Web Page Generation
Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note...
PT-2020-16954
Name of the Vulnerable Software and Affected Versions Joplin version 1.2.6 Description The issue allows for XSS via a LINK element in a note. This can potentially lead to malicious script execution. Recommendations For Joplin version 1.2.6, update to a newer version that contains a fix for this...
Release Information for NetApp Element Plug-In for Veeam Backup & Replication
This plug-in leverages the Veeam Universal Storage API, which enables storage OEMs to allow Veeam Backup & Replication integration to the arrays for backup and replication jobs. Requirements Before installing NetApp Element Plug-In v1.0.13, ensure that you are running Veeam Backup & Replication...
Cisco IOS XE Command Execution Root Privilege
The vulnerability of the Cisco IOS XE operating system’s command-line interface is related to errors that occur during the elimination of certain elements in the operating system’s commands. Exploiting this vulnerability allows an attacker to execute commands with root privileges after the device...
CVE-2020-27955: Uncontrolled Search Path Element
Git LFS 2.12.0 allows Remote Code Execution...
squid: Off-by-one error in addStackElement allows for heap buffer overflow and crash
A flaw was found in squid. When Squid is parsing ESI, it keeps the ESI elements in ESIContext. ESIContext contains a buffer for holding a stack of ESIElements. When a new ESIElement is parsed, it is added via addStackElement. addStackElement has a check for the number of elements in this buffer,...