5587 matches found
CVE-2020-1619: Improper Input Validation
A privilege escalation vulnerability in Juniper Networks QFX10K Series, EX9200 Series, MX Series, and PTX Series with Next-Generation Routing Engine NG-RE, allows a local authenticated high privileged user to access the underlying WRL host. This issue only affects QFX10K Series with NG-RE, EX9200...
CVE-2020-4252: Improper Neutralization of Input During Web Page Generation
IBM DOORS Next Generation DNG/RRC 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
CVE-2019-4746: Improper Neutralization of Input During Web Page Generation
IBM DOORS Next Generation DNG/RRC 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
CVE-2019-4740: Improper Neutralization of Input During Web Page Generation
IBM DOORS Next Generation DNG/RRC 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
PT-2020-11054
Name of the Vulnerable Software and Affected Versions IBM DOORS Next Generation DNG/RRC versions 6.0.2 through 6.0.61 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...
PT-2020-11051
Name of the Vulnerable Software and Affected Versions IBM DOORS Next Generation DNG/RRC versions 6.0.2 through 6.0.61 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...
PT-2020-17948
Name of the Vulnerable Software and Affected Versions IBM DOORS Next Generation DNG/RRC versions 6.0.2 through 6.0.61 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...
PT-2020-4092
Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 16.1R7-S6 Juniper Networks Junos OS versions prior to 16.2R2-S11 Juniper Networks Junos OS versions prior to 17.1R2-S11, 17.1R3 Juniper Networks Junos OS versions prior to 17.2R1-S9, 17.2R3-S3 Junip...
PT-2020-11049
Name of the Vulnerable Software and Affected Versions IBM DOORS Next Generation DNG/RRC versions 6.0.2 through 6.0.61 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...
CVE-2019-4737: Improper Neutralization of Input During Web Page Generation
IBM DOORS Next Generation DNG/RRC 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
Security Bulletin: Multiple cross-site scripting vulnerabilities affect IBM DOORS Next Generation
Summary There are multiple cross-site scripting defects that affect IBM DOORS Next Generation DNG/RRC Vulnerability Details CVEID: CVE-2019-4740 DESCRIPTION: IBM DOORS Next Generation DNG/RRC is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code...
3nit-components (>=0.0.2, <=0.0.4), 3nit-utils (>=0.3.0, <=1.0.2) +424 more potentially affected by CVE-2020-5284 via next (>=1.2.3, <=9.3.1)
next NPM version =1.2.3, =0.0.2, =0.3.0, =0.0.0-canary.0, =0.0.1, =1.0.0, =0.4.0, =0.3.0, =6.2.0, =6.2.0, =3.0.0, =0.1.0, =0.3.0, =1.13.5-next.8 and more Source cves: CVE-2020-5284 Source advisory: OSV:GHSA-FQ77-7P7R-83RJ...
3nit-components (>=0.0.2, <=0.0.4), 3nit-utils (>=0.3.0, <=1.0.2) +424 more potentially affected by CVE-2020-5284 via next (>=1.2.3, <=9.3.1)
next NPM version =1.2.3, =0.0.2, =0.3.0, =0.0.0-canary.0, =0.0.1, =1.0.0, =0.4.0, =0.3.0, =6.2.0, =6.2.0, =3.0.0, =0.1.0, =0.3.0, =1.13.5-next.8 and more Source cves: CVE-2020-5284 Source advisory: GHSA-FQ77-7P7R-83RJ...
GHSA-FQ77-7P7R-83RJ Directory Traversal in Next.js
Impact - Not affected: Deployments on ZEIT Now v2 https://zeit.co are not affected - Not affected: Deployments using the serverless target - Not affected: Deployments using next export - Affected: Users of Next.js below 9.3.2 We recommend everyone to upgrade regardless of whether you can reproduc...
3nit-components (>=0.0.2, <=0.0.4), 3nit-utils (>=0.3.0, <=1.0.2) +424 more potentially affected by CVE-2020-5284 via next (>=1.2.3, <=9.3.1)
next NPM version =1.2.3, =0.0.2, =0.3.0, =0.0.0-canary.0, =0.0.1, =1.0.0, =0.4.0, =0.3.0, =6.2.0, =6.2.0, =3.0.0, =0.1.0, =0.3.0, =1.13.5-next.8 and more Source cves: CVE-2020-5284 Source advisory: MEND:CVE-2020-5284...
PT-2020-18374
Name of the Vulnerable Software and Affected Versions Next.js versions prior to 9.3.2 Description The issue allows attackers to craft special requests to access files in the dist directory .next due to a directory traversal vulnerability. This vulnerability does not affect files outside of the di...
March 2020 -- Akamai Edge Security: Leader in Five Forrester Wave Reports
Forrester has named Akamai a Leader in five different Wave and New Wave reports. This significant achievement reflects the strength of Akamai's intelligent edge platform for securing and delivering digital experiences across our entire security portfolio. Forrester Wave Leaders are the top vendor...
CVE-2020-0530
Improper buffer restrictions in firmware for IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access. The list of affected products is provided in intel-sa-00343: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html...
Windows Cryptography Next Generation Disclosure
The vulnerability of the Windows Cryptography Next Generation CNG service on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...
Windows Cryptography Next Generation Disclosure
The vulnerability of the Windows Cryptography Next Generation CNG service on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...