1073 matches found
CVE-2021-3285
jxbrowser in TI Code Composer Studio IDE 8.x through 10.x before 10.1.1 does not verify X.509 certificates for HTTPS...
CVE-2021-3285
The CVE-2021-3285 entry affects TI Code Composer Studio IDE (versions 8.x–10.x) where jxbrowser fails to verify X.509 certificates for HTTPS. Root cause: the affected jxbrowser component in CCS does not perform proper validation of server certificates, enabling potential man-in-the-middle if an a...
CVE-2021-3285: Improper Certificate Validation
jxbrowser in TI Code Composer Studio IDE 8.x through 10.x before 10.1.1 does not verify X.509 certificates for HTTPS...
PT-2021-19970
Name of the Vulnerable Software and Affected Versions TI Code Composer Studio IDE versions 8.x through 10.x before 10.1.1 Description The issue is related to the jxbrowser component in TI Code Composer Studio IDE, which does not verify X.509 certificates for HTTPS connections. This could...
CVE-2020-29443
ideatapicmdreplyend in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because a buffer index is not validated...
CVE-2020-29443
ideatapicmdreplyend in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because a buffer index is not validated...
CVE-2020-29443: Out-of-bounds Read
ideatapicmdreplyend in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because a buffer index is not validated...
HBuilder windows version has dll hijacking vulnerability
HBuilder is a web development IDE that supports HTML5 from DCloud Digital Heaven. A dll hijacking vulnerability exists in HBuilder windows version. An attacker can exploit this vulnerability to execute malicious code...
CVE-2020-14368
A flaw was found in Eclipse Che in versions prior to 7.14.0 that impacts CodeReady Workspaces. When configured with cookies authentication, Theia IDE doesn't properly set the SameSite value, allowing a Cross-Site Request Forgery CSRF and consequently allowing a cross-site WebSocket hijack on Thei...
CVE-2020-14368
A flaw was found in Eclipse Che in versions prior to 7.14.0 that impacts CodeReady Workspaces. When configured with cookies authentication, Theia IDE doesn't properly set the SameSite value, allowing a Cross-Site Request Forgery CSRF and consequently allowing a cross-site WebSocket hijack on Thei...
CVE-2020-14368: Cross-Site Request Forgery (CSRF)
A flaw was found in Eclipse Che in versions prior to 7.14.0 that impacts CodeReady Workspaces. When configured with cookies authentication, Theia IDE doesn't properly set the SameSite value, allowing a Cross-Site Request Forgery CSRF and consequently allowing a cross-site WebSocket hijack on Thei...
PT-2020-13982
Name of the Vulnerable Software and Affected Versions Eclipse Che versions prior to 7.14.0 Description A flaw in Eclipse Che impacts CodeReady Workspaces, allowing a Cross-Site Request Forgery CSRF and a cross-site WebSocket hijack on Theia IDE when configured with cookies authentication. This...
GitLab: Remote hacker can download all the files of master branch in public projects where everything is members only.
Summary Hi team, I found this weird behavior which I thought I should report, a malicious hacker can remotely download files of any branch in a public project where all permissions are ==member-only==, Gitlab uses a link to download files of a branch, normally ==an unauthenticated user will not b...
CVE-2020-27622
In JetBrains IntelliJ IDEA before 2020.2, the built-in web server could expose information about the IDE version...
CVE-2020-27622: Undefined Security Weakness
In JetBrains IntelliJ IDEA before 2020.2, the built-in web server could expose information about the IDE version...
About the security content of Xcode 12.0 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
hw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer dereference because it lacks a pointer check before an ide_cancel_dma_sync call.
...
DEBIAN-CVE-2020-25743
hw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer dereference because it lacks a pointer check before an idecanceldmasync call...