11481 matches found
PT-2020-15761 · Ignite Realtime · Openfire
Name of the Vulnerable Software and Affected Versions: Openfire version 4.5.1 Description: A Stored Cross-site issue allows an attacker to execute an arbitrary malicious URL via the vulnerable searchName and alias parameters in the import certificate trusted page, specifically through a POST...
OpenAPI Import Failed
OpenAPI file could not be imported and cannot be used during the scan. No source data...
OpenAPI Import Success
OpenAPI file was successfully imported and can be used during the scan. No source data...
OPENSUSE-SU-2020:1278-1 Security update for gettext-runtime
This update for gettext-runtime fixes the following issues: - Fix boo941629-unnessary-rpath-on-standard-path.patch bsc941629 - Added msgfmt-double-free.patch to fix a double free error CVE-2018-18751 bsc1113719 - Add patch msgfmt-reset-msg-length-after-remove.patch which does reset the length of...
USN-4474-1 firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, trick the user in to installing a malicious extension, spoof the URL bar, leak sensitive information...
OPENSUSE-SU-2020:1261-1 Security update for libreoffice
This update for libreoffice fixes the following issues: - Update to 6.4.5.2: Various fixes all around - Remove mime-info and application-registry dirs bsc1062631 - Fix bsc1172053 - LO-L3: Image disappears during roundtrip 365-Impress-365 bsc1172053.diff - Fix bsc1172189 - LO-L3: Impress crashes...
UBUNTU-CVE-2020-15668
A lock was missing when accessing a data structure and importing certificate information into the trust database. This vulnerability affects Firefox 80 and Firefox for Android 80...
Open-Xchange: A specifically designed sieve script can cause a DoS in lib-sieve during sieve script compilation via NULL pointer dereference
Reproduction realcrash.sieve is the attached script 1. Build dovecot and pigeonhole 2. Run sievec realcrash.sieve Requirements include and variables extensions should be required. One of the global commands global/export/import without any arguments should be followed by the same command with val...
MailMate Resource Management Error Vulnerability
MailMate is a macOS-based IMAP email client. A resource management error vulnerability exists in MailMate versions prior to 1.11, which stems from the program automatically importing S/MIME certificates and replacing pre-existing certificates by default. An attacker can exploit this vulnerability...
CVE-2020-12618
eM Client before 7.2.33412.0 automatically imported S/MIME certificates and thereby silently replaced existing ones. This allowed a man-in-the-middle attacker to obtain an email-validated S/MIME certificate from a trusted CA and replace the public key of the entity to be impersonated. This enable...
Arista Configuration Importer
This module imports an Arista device configuration. Module Options msf use auxiliary/admin/networking/aristaconfig msf auxiliaryaristaconfig show actions ...actions... msf auxiliaryaristaconfig set ACTION msf auxiliaryaristaconfig show options ...show and set options... msf auxiliaryaristaconfig...
CVE-2020-1182
A remote code execution vulnerability exists in Microsoft Dynamics 365 for Finance and Operations on-premises version 10.0.11. An attacker who successfully exploited this vulnerability could gain remote code execution via server-side script execution on the victim server. An authenticated attacke...
CVE-2020-1182
A remote code execution vulnerability exists in Microsoft Dynamics 365 for Finance and Operations on-premises version 10.0.11. An attacker who successfully exploited this vulnerability could gain remote code execution via server-side script execution on the victim server. An authenticated attacke...
PT-2020-3765 · Microsoft · Dynamics 365 For Finance/Operations
Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 for Finance and Operations on-premises version 10.0.11 Description: A remote code execution issue exists, allowing an attacker to gain remote code execution via server-side script execution on the victim server. An...
CVE-2020-13281
For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature...
CVE-2020-13281
For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature...
CVE-2020-13281
For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature...
Authorization
For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature...
CVE-2020-13281
GitLab CVE-2020-13281 affects GitLab installations with versions before 13.0.12, 13.1.6, and 13.2.3, where the project import feature can trigger a denial-of-service. The connected records confirm the vulnerable ranges and the DoS impact. Remediation is to upgrade to a fixed release (GitLab 13.2....
