CVE-2020-13796: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/structure/structure.class.php...

WS-2020-0365

nDPI in versions 1.6 to 3.0 is vulnerable to Heap-buffer-overflow in ndpicheckspotify , related to src/lib/protocols/spotify.c...

CVE-2020-13615

lib/QoreSocket.cpp in Qore before 0.9.4.2 lacks hostname verification for X.509 certificates...

PT-2020-13616

Name of the Vulnerable Software and Affected Versions Qore versions prior to 0.9.4.2 Description The issue is related to a lack of hostname verification for X.509 certificates in the lib/QoreSocket.cpp file. This could potentially allow for certain types of attacks. Recommendations For versions...

CVE-2020-13615: Improper Certificate Validation

lib/QoreSocket.cpp in Qore before 0.9.4.2 lacks hostname verification for X.509 certificates...

metasploit-framework

This is an instance of the Metasploit Framework repository, a widely used penetration testing tool. The Metasploit Framework is a comprehensive platform for testing and exploiting vulnerabilities in computer systems and applications. It is a collection of tools and scripts that can be used to...

CVE-2020-12649

Gurbalib through 2020-04-30 allows lib/cmds/player/help.c directory traversal for reading administrative paths...

PT-2020-13187

Name of the Vulnerable Software and Affected Versions Gurbalib versions prior to 2020-04-30 Description The issue allows directory traversal in the lib/cmds/player/help.c file, enabling the reading of administrative paths. Recommendations For versions prior to 2020-04-30, consider restricting...

CVE-2020-12649: Improper Limitation of a Pathname to a Restricted Directory

Gurbalib through 2020-04-30 allows lib/cmds/player/help.c directory traversal for reading administrative paths...

EulerOS Virtualization for ARM 64 3.0.2.0 : python (EulerOS-SA-2020-1516)

According to the versions of the python packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Python Software Foundation Python CPython version 2.7 contains a CWE-77: Improper Neutralization of Special Elements...

PT-2020-6861 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.8 Description: The issue is related to uncontrolled recursion in the lib/nlattr.c component of the Linux kernel. This can be exploited by attackers to cause a denial of service via a nested Netlink policy with...

CVE-2020-12458

An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposure of sensitive information e.g., cleartext or encrypted datasource passwords...

CVE-2020-11884

In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enablesacfuaccess in arch/s390/lib/uaccess.c that fails to protect against a concurrent page table upgrade, aka CID-3f777e19d171. A crash could also occur...

PT-2020-13123

Name of the Vulnerable Software and Affected Versions Grafana versions prior to 7.2.1 Grafana versions through 6.7.3 Description An information-disclosure flaw was found in Grafana. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can...

CVE-2020-12458: Incorrect Permission Assignment for Critical Resource

An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposure of sensitive information e.g., cleartext or encrypted datasource passwords...

CVE-2020-11884: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enablesacfuaccess in arch/s390/lib/uaccess.c that fails to protect against a concurrent page table upgrade, aka CID-3f777e19d171. A crash could also occur...

CVE-2020-12274

In TestLink 1.9.20, the lib/cfields/cfieldsExport.php gobackurl parameter causes a security risk because it depends on client input and is not constrained to lib/cfields/cfieldsView.php at the web site associated with the session...

CVE-2020-12274

CVE-2020-12274 affects TestLink 1.9.20. The vulnerability is in lib/cfields/cfieldsExport.php where the goback_url parameter uses client input without proper constraining to lib/cfields/cfieldsView.php for the session site. This describes a security risk but the connected Red Hat/CVE sources do n...

CVE-2020-12274

In TestLink 1.9.20, the lib/cfields/cfieldsExport.php gobackurl parameter causes a security risk because it depends on client input and is not constrained to lib/cfields/cfieldsView.php at the web site associated with the session...

PT-2020-13087

Name of the Vulnerable Software and Affected Versions TestLink version 1.9.20 Description The issue arises from the goback url parameter in the lib/cfields/cfieldsExport.php file, which relies on client input and lacks proper constraints to lib/cfields/cfieldsView.php within the session's...