PT-2020-22050

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurred due to an unknown read issue. The crash state involves several functions, including asn1 item print ctx and asn1 template print ctx. No...

PT-2020-22044

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue is reported, which can cause a crash. The crash occurs in the following functions: do print ex, asn1 item print ctx, and...

Path traversal vulnerability in blueocean

blueocean 1.23.2 and earlier provides an undocumented feature flag, blueocean.features.GITREADSAVETYPE, that when set to the value clone allows an attacker with Item/Configure or Item/Create permission to read arbitrary files on the Jenkins controller file system. blueocean 1.23.3 no longer...

CVE-2020-25119

The Admin CP in vBulletin 5.6.3 allows XSS via a Title of a Child Help Item in the Login/Logoff part of the User Manual...

PT-2020-15945

Name of the Vulnerable Software and Affected Versions silverstripe-advancedreports versions 1.0 through 2.0 Description The issue allows for Cross-Site Scripting XSS due to the possibility of injecting and storing malicious JavaScript code. This affects the "report preview" when an SVG document i...

PT-2020-15959

Name of the Vulnerable Software and Affected Versions vBulletin version 5.6.3 Description The issue concerns a Cross-Site Scripting XSS flaw in the Admin CP of the affected software. Specifically, it can be triggered via the Title of a Child Help Item in the Login/Logoff section of the User Manua...

PT-2020-15451 · Jenkins · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.251 and earlier Jenkins LTS versions 2.235.3 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability. This occurs because the project naming strategy description is not properly escaped...

Adobe Acrobat Pro DC Web2PDF:AppLinks JavaScript Restrictions Bypass Vulnerability

This vulnerability allows remote attackers to bypass JavaScript API restrictions on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within a...

Stored XSS vulnerability in project naming strategy

Jenkins 2.251 and earlier, LTS 2.235.3 and earlier does not escape the project naming strategy description that is displayed on item creation. This results in a stored cross-site scripting XSS vulnerability exploitable by users with Overall/Manage permission. Jenkins 2.252, LTS 2.235.4 escapes th...

CVE-2020-0243

In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2020-21800

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details include the crash type and state, with functions such as ASN1 get object, asn1...

PT-2020-21727

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap buffer overflow read, as indicated by the crash type. The crash state involves several functions, including asn1 item ex d2i...

PT-2020-21696

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash occurs in the following functions: dex parse debug item, parse dex class method, and parse...

PT-2020-21726

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash occurs in the following functions: dex parse debug item, parse dex class method, and parse...

CVE-2020-11074

In PrestaShop from version 1.5.3.0 and before version 1.7.6.6, there is a stored XSS when using the name of a quick access item. The problem is fixed in 1.7.6.6...

Atlassian JIRA Server and Data Center Authorization Issues Vulnerability (CNVD-2021-39166)

Atlassian JIRA Server and Atlassian JIRA Data Center are both products of the Australian company Atlassian Atlassian.Atlassian JIRA Server is the server version of a defect tracking management system. Atlassian JIRA Server is the server version of a defect tracking management system, which is use...

PT-2020-12534 · Prestashop · Prestashop

Name of the Vulnerable Software and Affected Versions: PrestaShop versions 1.5.3.0 through 1.7.6.6 PrestaShop versions 1.5.3.0 through 1.7.7.6 Description: The issue is related to a stored XSS when using the name of a quick access item. Recommendations: For PrestaShop versions 1.5.3.0 through...

CVE-2020-11074: Improper Neutralization of Input During Web Page Generation

In PrestaShop from version 1.5.3.0 and before version 1.7.6.6, there is a stored XSS when using the name of a quick access item. The problem is fixed in 1.7.6.6...

PT-2020-22271

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue has been identified, potentially causing a crash. The crash state involves functions such as r read le32, dex method...

PT-2020-22369

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurred due to an unknown read issue. The crash state involves several functions, including asn1 item print ctx and asn1 template print ctx. No...