CVE-2020-13795

An issue was discovered in Navigate CMS through 2.8.7. It allows Directory Traversal because lib/packages/templates/template.class.php mishandles ../ and ..\ substrings...

CVE-2020-13797

An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/websites/website.class.php...

PT-2020-13682

Name of the Vulnerable Software and Affected Versions Navigate CMS versions prior to 2.8.8 Description The issue allows for XSS due to a lack of purify calls in the lib/packages/structure/structure.class.php file. Recommendations For Navigate CMS versions prior to 2.8.8, update to version 2.8.8 o...

CVE-2020-13796: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/structure/structure.class.php...

CVE-2020-13798: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/feeds/feed.class.php...

CVE-2020-13795: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Navigate CMS through 2.8.7. It allows Directory Traversal because lib/packages/templates/template.class.php mishandles ../ and ..\ substrings...

CVE-2020-13797: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/websites/website.class.php...

WS-2020-0365

nDPI in versions 1.6 to 3.0 is vulnerable to Heap-buffer-overflow in ndpicheckspotify , related to src/lib/protocols/spotify.c...

CVE-2020-13615

lib/QoreSocket.cpp in Qore before 0.9.4.2 lacks hostname verification for X.509 certificates...

PT-2020-13616

Name of the Vulnerable Software and Affected Versions Qore versions prior to 0.9.4.2 Description The issue is related to a lack of hostname verification for X.509 certificates in the lib/QoreSocket.cpp file. This could potentially allow for certain types of attacks. Recommendations For versions...

CVE-2020-13615: Improper Certificate Validation

lib/QoreSocket.cpp in Qore before 0.9.4.2 lacks hostname verification for X.509 certificates...

metasploit-framework

This is an instance of the Metasploit Framework repository, a widely used penetration testing tool. The Metasploit Framework is a comprehensive platform for testing and exploiting vulnerabilities in computer systems and applications. It is a collection of tools and scripts that can be used to...

CVE-2020-12649

Gurbalib through 2020-04-30 allows lib/cmds/player/help.c directory traversal for reading administrative paths...

PT-2020-13187

Name of the Vulnerable Software and Affected Versions Gurbalib versions prior to 2020-04-30 Description The issue allows directory traversal in the lib/cmds/player/help.c file, enabling the reading of administrative paths. Recommendations For versions prior to 2020-04-30, consider restricting...

CVE-2020-12649: Improper Limitation of a Pathname to a Restricted Directory

Gurbalib through 2020-04-30 allows lib/cmds/player/help.c directory traversal for reading administrative paths...

EulerOS Virtualization for ARM 64 3.0.2.0 : python (EulerOS-SA-2020-1516)

According to the versions of the python packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Python Software Foundation Python CPython version 2.7 contains a CWE-77: Improper Neutralization of Special Elements...

PT-2020-6861 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.8 Description: The issue is related to uncontrolled recursion in the lib/nlattr.c component of the Linux kernel. This can be exploited by attackers to cause a denial of service via a nested Netlink policy with...

CVE-2020-12458

An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposure of sensitive information e.g., cleartext or encrypted datasource passwords...

CVE-2020-11884

In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enablesacfuaccess in arch/s390/lib/uaccess.c that fails to protect against a concurrent page table upgrade, aka CID-3f777e19d171. A crash could also occur...

PT-2020-13123

Name of the Vulnerable Software and Affected Versions Grafana versions prior to 7.2.1 Grafana versions through 6.7.3 Description An information-disclosure flaw was found in Grafana. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can...