9938 matches found
PT-2020-1347
Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise CC Common Application Objects versions 9.1 through 9.2 Description The issue is related to inadequate access control in the Approval Framework component of PeopleSoft Enterprise CC Common Application Objects, allowing an...
PT-2020-1320
Name of the Vulnerable Software and Affected Versions Windows Graphics Device Interface Plus GDI+ affected versions not specified Description An information disclosure issue exists in the way Windows Graphics Device Interface Plus GDI+ handles objects in memory. This allows an attacker to retriev...
CVE-2020-0629: Undefined Security Weakness
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626,...
CVE-2020-0613: Undefined Security Weakness
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626, CVE-2020-0627,...
CVE-2020-0631: Undefined Security Weakness
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626,...
PT-2020-1323
Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A remote code execution issue exists in Microsoft Office software due to improper handling of objects in memory. This could allow an attacker to run arbitrary code in the context of...
Gitlab -- Private objects exposed through project import
Gitlab reports: Private objects exposed through project importi...
CVE-2019-11756
Improper refcounting of soft token session objects could cause a use-after-free and crash likely limited to a denial of service. This vulnerability affects Firefox 71...
CVE-2019-11756: Use After Free
Improper refcounting of soft token session objects could cause a use-after-free and crash likely limited to a denial of service. This vulnerability affects Firefox 71...
SAP BusinessObjects Business Intelligence Web Intelligence HTML Interface XSS
The vulnerability of the Web Intelligence HTML interface of the SAP BusinessObjects Business Intelligence platform is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
SAP BusinessObjects Business Intelligence Web Intelligence HTML Interface XSS
The vulnerability of the Web Intelligence HTML interface of the SAP BusinessObjects Business Intelligence platform is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
SAP BusinessObjects Business Intelligence Web Intelligence HTML Interface XSS
The vulnerability of the Web Intelligence HTML interface of the SAP BusinessObjects Business Intelligence platform is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
SAP BusinessObjects Business Intelligence Web Intelligence HTML Interface XSS
The vulnerability of the Web Intelligence HTML interface of the SAP BusinessObjects Business Intelligence platform is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
SAP BusinessObjects Business Intelligence Web Intelligence HTML Interface XSS
The vulnerability of the Web Intelligence HTML interface of the SAP BusinessObjects Business Intelligence platform is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
CVE-2019-19266: Improper Neutralization of Input During Web Page Generation
IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 and probably earlier versions allows XSS issue 2 of 2 in notes for objects...
PT-2020-10117
Name of the Vulnerable Software and Affected Versions IceWarp WebMail Server versions prior to 12.2.1.1 Description The issue allows for XSS in notes for objects. Recommendations For versions prior to 12.2.1.1, update to version 12.2.1.1 or later to resolve the issue...
Command Execution Vulnerability in Oracle WebLogic Server
WebLogic Server is Oracle's JavaEE-based middleware for developing, integrating, deploying and managing large-scale distributed Web applications, web applications and database applications. A command execution vulnerability exists in Oracle WebLogic Server. An attacker can cause arbitrary code...
Multiple F5 Products Input Validation Error Vulnerability
F5 BIG-IP and others are products of F5 Corporation in the U.S. F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, etc. F5 Enterprise Manager is a tool that provides a view of the entire BIG-IP application...
Docker docker-credential-helpers resource management error vulnerability
Docker is an open source application container engine from the American company Docker. The product supports creating a container lightweight virtual machine and deploying and running applications on Linux systems, as well as automating the installation, deployment, and upgrading of applications...
MGASA-2019-0395 Updated sssd packages fix security vulnerability
The updated packages fix a security vulnerability: A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all authenticated users to login instead of denying access. CVE-2018-16...