CVE-2020-5251 Information disclosure in parse-server

In parser-server before version 4.1.0, you can fetch all the users objects, by using regex in the NoSQL query. Using the NoSQL, you can use a regex on sessionToken and find valid accounts this way...

The vulnerability of the L2CAP_PARSE_CONF_RSP function in Linux operating systems, related to the disclosure of information, allows attackers to gain access to confidential data.

The vulnerability of the L2CAPPARSECONFRSP function in Linux operating systems is related to buffer overflows in the queue. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

The vulnerability of the `__zzip_parse_root_directory` function in the ZZIPlib compression library, related to the occurrence of operations outside the buffer’s boundaries, allows a hacker to trigger a service failure.

The vulnerability of the zzipparserootdirectory function in the ZZIPlib compression library is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using a specially created zip file...

The vulnerability of the `__zzip_parse_root_directory` function in the ZZIPlib archive library arises from the fact that resources are not released after their useful period has ended. This allows a malicious actor to cause service failures.

The vulnerability of the zzipparserootdirectory function in the ZZIPlib compression library is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the `__zzip_parse_root_directory` function in the ZZIPlib compression library, which involves unlimited distribution of resources, allows a hacker to cause a service failure.

The vulnerability of the zzipparserootdirectory function in the ZZIPlib compression library is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions by using a specially created zip file...

CVE-2020-1815

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a memory leak vulnerability. The software does not sufficiently track and release allocated memory while...

DEBIAN-CVE-2020-8124

Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks...

CVE-2020-8124

Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks...

CVE-2020-8124

Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks...

UBUNTU-CVE-2020-8124

Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks...

CVE-2020-8124

Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks...

CVE-2020-8124

CVE-2020-8124 refers to a vulnerability in the url-parse npm package (versions

PT-2020-19961 · Npm +2 · Url-Parse +2

Name of the Vulnerable Software and Affected Versions: url-parse versions 1.4.4 and earlier Description: The issue is related to insufficient validation and sanitization of user input in the url-parse npm package, which may allow an attacker to bypass security checks. Recommendations: For version...

Cross-Site Scripting (XSS)

url-parse is vulnerable to cross-site scripting XSS. The vulnerability exists as the unsanitized value of address in index.js could be used to bypass validation checks when used in the browser...

Fedora: Security Advisory for podofo (FEDORA-2020-dd79b615cd)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 31 Update: podofo-0.9.6-9.fc31

PoDoFo is a library to work with the PDF file format. The name comes from the first letter of PDF Portable Document Format. A few tools to work with PDF files are already included in the PoDoFo package. The PoDoFo library is a free, portable C++ library which includes classes to parse PDF files a...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2019-1549)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

kernel: Heap overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c

A flaw was found in the mwifiex implementation in the Linux kernel. A system connecting to wireless access point could be manipulated by an attacker with advanced permissions on the access point into localized memory corruption or possibly privilege escalation...

The vulnerability of the XML_PARSE_HUGE configuration in the console-based ImageMagick graphics editor allows a attacker to trigger a service failure.

The vulnerability of the XMLPARSEHUGE configuration in the console-based ImageMagick graphics editor is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to cause service failures remotely...

The vulnerability of the predicate_parse() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the predicateparse function kernel/trace/traceeventsfilter.c in the Linux operating system is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...