9920 matches found
PT-2020-1287
Name of the Vulnerable Software and Affected Versions Microsoft Windows Graphics Component affected versions not specified Description The issue arises from the Microsoft Windows Graphics Component's improper handling of objects in memory. This can lead to an information disclosure, where sensiti...
CVE-2020-0629: Undefined Security Weakness
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626,...
CVE-2020-0613: Undefined Security Weakness
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627,...
PT-2020-1283
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue exists due to errors in handling memory objects, which can be exploited by an attacker to elevate their privileges using a specially crafted application. This can affect the system...
PT-2020-1323
Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A remote code execution issue exists in Microsoft Office software due to improper handling of objects in memory. This could allow an attacker to run arbitrary code in the context of...
PT-2020-1347
Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise CC Common Application Objects versions 9.1 through 9.2 Description The issue is related to inadequate access control in the Approval Framework component of PeopleSoft Enterprise CC Common Application Objects, allowing an...
PT-2020-1320
Name of the Vulnerable Software and Affected Versions Windows Graphics Device Interface Plus GDI+ affected versions not specified Description An information disclosure issue exists in the way Windows Graphics Device Interface Plus GDI+ handles objects in memory. This allows an attacker to retriev...
CVE-2020-0631: Undefined Security Weakness
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626,...
Gitlab -- Private objects exposed through project import
Gitlab reports: Private objects exposed through project importi...
CVE-2019-11756
Improper refcounting of soft token session objects could cause a use-after-free and crash likely limited to a denial of service. This vulnerability affects Firefox 71...
CVE-2019-11756: Use After Free
Improper refcounting of soft token session objects could cause a use-after-free and crash likely limited to a denial of service. This vulnerability affects Firefox 71...
SAP BusinessObjects Business Intelligence Web Intelligence HTML Interface XSS
The vulnerability of the Web Intelligence HTML interface of the SAP BusinessObjects Business Intelligence platform is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
SAP BusinessObjects Business Intelligence Web Intelligence HTML Interface XSS
The vulnerability of the Web Intelligence HTML interface of the SAP BusinessObjects Business Intelligence platform is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
SAP BusinessObjects Business Intelligence Web Intelligence HTML Interface XSS
The vulnerability of the Web Intelligence HTML interface of the SAP BusinessObjects Business Intelligence platform is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
SAP BusinessObjects Business Intelligence Web Intelligence HTML Interface XSS
The vulnerability of the Web Intelligence HTML interface of the SAP BusinessObjects Business Intelligence platform is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
SAP BusinessObjects Business Intelligence Web Intelligence HTML Interface XSS
The vulnerability of the Web Intelligence HTML interface of the SAP BusinessObjects Business Intelligence platform is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
PT-2020-10117
Name of the Vulnerable Software and Affected Versions IceWarp WebMail Server versions prior to 12.2.1.1 Description The issue allows for XSS in notes for objects. Recommendations For versions prior to 12.2.1.1, update to version 12.2.1.1 or later to resolve the issue...
CVE-2019-19266: Improper Neutralization of Input During Web Page Generation
IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 and probably earlier versions allows XSS issue 2 of 2 in notes for objects...
Command Execution Vulnerability in Oracle WebLogic Server
WebLogic Server is Oracle's JavaEE-based middleware for developing, integrating, deploying and managing large-scale distributed Web applications, web applications and database applications. A command execution vulnerability exists in Oracle WebLogic Server. An attacker can cause arbitrary code...
Multiple F5 Products Input Validation Error Vulnerability
F5 BIG-IP and others are products of F5 Corporation in the U.S. F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, etc. F5 Enterprise Manager is a tool that provides a view of the entire BIG-IP application...