2311 matches found
Broadcom CA API Developer Portal Information Disclosure Vulnerability
Broadcom CA API Developer Portal is an API developer portal product of Broadcom's complete API lifecycle management solution, which provides API release control, API performance monitoring and other functions. An information disclosure vulnerability exists in Broadcom CA API Developer Portal...
CVE-2019-20664
Certain NETGEAR devices are affected by stored XSS. This affects RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 before 2.3.5.26, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK40 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30...
CVE-2019-20660
Certain NETGEAR devices are affected by stored XSS. This affects RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 before 2.3.5.26, RBR40 before 2.3.5.30, RBS40 before 2.3.5.30, RBK40 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30...
Dell EMC XtremIO XMS Information Disclosure Vulnerability
Dell EMC XtremIO XMS is a suite of XtremIO Enterprise Storage Platform management software from Dell USA. An information disclosure vulnerability exists in Dell EMC XtremIO XMS versions prior to 6.3.0. The vulnerability stems from an error in the configuration, etc. of a networked system or produ...
Dell EMC XtremIO XMS Cross-Site Scripting Vulnerability
Dell EMC XtremIO XMS is a suite of XtremIO Enterprise Storage Platform management software from Dell USA. A cross-site scripting vulnerability exists in Dell EMC XtremIO XMS versions prior to 6.3.0. The vulnerability stems from a lack of proper validation of client data by the WEB application. An...
SilverStripe Cross-Site Request Forgery Vulnerability (CNVD-2020-10710)
SilverStripe is New Zealand SilverStripe company's set of open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . A cross-site request forgery vulnerability exists in SilverStripe 4.3.3 and earlier...
HTTP Response Splitting
Overview org.wso2.transport.http:org.wso2.transport.http.netty is a HTTP protocol handling implementations for C5 based products. Affected versions of this package are vulnerable to HTTP Response Splitting due to HTTP Header validation being disabled. Remediation Upgrade...
EyesOfNetwork Arbitrary OS Command Execution Vulnerability
EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides features such as business process configuration tools, generating pop-up windows when events occur in the active queue, and more. An arbitrary OS command execution vulnerability exists in EyesOfNetwork 5.3,...
AZL-44577 CVE-2020-8112 affecting package openjpeg2 for versions less than 2.3.1-12
opjt1clbldecodeprocessor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851...
UBUNTU-CVE-2012-6083
Freeciv before 2.3.3 allows remote attackers to cause a denial of service via a crafted packet...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1474)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Apple iOS and Apple watchOS Mail Message Framework Component Resource Management Error Vulnerability
Apple iOS and Apple watchOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple watchOS is an operating system for smartwatches. mail Message Framework is one of the email messaging frameworks. A resource management error vulnerability exists in th...
Apple iOS and Apple watchOS Mail component input validation error vulnerability
Apple iOS and Apple watchOS are both products of Apple Inc. Apple iOS is an operating system for mobile devices. apple watchOS is an operating system for smartwatches. mail is an email plug-in. An input validation error vulnerability exists in the Mail component in Apple iOS versions prior to 12....
Unspecified Vulnerability in Apple iOS Status Bar Component
Apple iOS is an operating system for mobile devices developed by Apple Inc.Status Bar is one of the status bar components. A security vulnerability exists in the Status Bar component in Apple iOS versions prior to 12.3. An attacker could exploit the vulnerability to display a locked icon after...
Apple iOS Photos Storage Component Sandbox Authentication Bypass Vulnerability
Apple iOS is an operating system developed by Apple for mobile devices.Photos Storage is one of the components of Photos Storage. A security vulnerability exists in the Photos Storage component in Apple iOS versions prior to 12.3. An attacker can exploit this vulnerability to bypass sandboxing...
CVE-2018-18288
CrushFTP through 8.3.0 is vulnerable to credentials theft via URL redirection...
DEBIAN-CVE-2019-19960
In wolfSSL before 4.3.0, wceccmulmodex does not properly resist side-channel attacks...
Unspecified vulnerability in CrushFTP (CNVD-2020-03729)
CrushFTP is a file transfer server. A security vulnerability exists in CrushFTP 8.3.0 and earlier versions that can be exploited by attackers to steal credentials...
GitLab Information Disclosure Vulnerability (CNVD-2020-03764)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in GitLab...