6021 matches found
CVE-2020-27224
In Eclipse Theia versions up to and including 1.2.0, the Markdown Preview @theia/preview, can be exploited to execute arbitrary code...
CVE-2020-27224
In Eclipse Theia versions up to and including 1.2.0, the Markdown Preview @theia/preview, can be exploited to execute arbitrary code...
Code injection
In Eclipse Theia versions up to and including 1.2.0, the Markdown Preview @theia/preview, can be exploited to execute arbitrary code...
CVE-2020-27224
The CVE-2020-27224 entry affects Eclipse Theia up to version 1.2.0, specifically the Markdown Preview module (@theia/preview). The issue enables arbitrary code execution due to a failure in how external data is processed during code segment construction in the Markdown Preview, leading to a code ...
@theia/plantuml (>=0.1.0, <=0.1.7) potentially affected by CVE-2020-27224 via @theia/preview (>=0.3.3, <=0.3.19)
@theia/preview NPM version =0.3.3, =0.1.0, =0.1.7 Source cves: CVE-2020-27224 Source advisory: MEND:CVE-2020-27224...
CVE-2020-27224
In Eclipse Theia versions up to and including 1.2.0, the Markdown Preview @theia/preview, can be exploited to execute arbitrary code...
PT-2021-11320
Name of the Vulnerable Software and Affected Versions: Eclipse Theia versions up to and including 1.2.0 Description: The issue allows for the execution of arbitrary code through the Markdown Preview @theia/preview in Eclipse Theia. Recommendations: For Eclipse Theia versions up to and including...
CVE-2020-27224: Improper Neutralization of Input During Web Page Generation
In Eclipse Theia versions up to and including 1.2.0, the Markdown Preview @theia/preview, can be exploited to execute arbitrary code...
Security fix for the ALT Linux 10 package dotnet-bootstrap-6.0 version 6.0.0.preview.1-alt1
Feb. 23, 2021 Vitaly Lipatov 6.0.0.preview.1-alt1 Wed Feb 17 2021 Vitaly Lipatov &[email protected] 5.0.3-alt1 - .NET 5.0.3 and .NET SDK 5.0.103 - CVE-2021-1721: .NET Core Denial of Service Vulnerability - CVE-2021-24112: .NET 5 and .NET Core Remote Code Execution Vulnerability...
Security fix for the ALT Linux 10 package dotnet-bootstrap-7.0 version 6.0.0.preview.1-alt1
Feb. 23, 2021 Vitaly Lipatov 6.0.0.preview.1-alt1 Wed Feb 17 2021 Vitaly Lipatov &[email protected] 5.0.3-alt1 - .NET 5.0.3 and .NET SDK 5.0.103 - CVE-2021-1721: .NET Core Denial of Service Vulnerability - CVE-2021-24112: .NET 5 and .NET Core Remote Code Execution Vulnerability...
CVE-2020-10254
An issue was discovered in ownCloud before 10.4. An attacker can bypass authentication on a password-protected image by displaying its preview...
CVE-2020-10254
An issue was discovered in ownCloud before 10.4. An attacker can bypass authentication on a password-protected image by displaying its preview...
Authentication flaw
An issue was discovered in ownCloud before 10.4. An attacker can bypass authentication on a password-protected image by displaying its preview...
CVE-2020-10254
An issue was discovered in ownCloud before 10.4. An attacker can bypass authentication on a password-protected image by displaying its preview...
CVE-2020-10254
CVE-2020-10254 affects ownCloud prior to 10.4, where an attacker can bypass authentication by leveraging the preview of a password-protected image. The vulnerability relates to access control on image previews, potentially allowing unauthorized users to view protected content. The issue is docume...
CVE-2020-10254: Improper Authentication
An issue was discovered in ownCloud before 10.4. An attacker can bypass authentication on a password-protected image by displaying its preview...
PT-2021-9145
Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 10.4 Description An issue was discovered in ownCloud where an attacker can bypass authentication on a password-protected image by displaying its preview. Recommendations For ownCloud versions prior to 10.4, update to...
Owncloud authorization issue vulnerability
OwnCloud OwnCloud is a personal cloud storage solution from OwnCloud Owncloud, an American company. An authorization issue vulnerability exists in OwnCloud, which can be exploited by an attacker to bypass authentication of password-protected images by displaying a preview...
CVE-2021-3271
PressBooks 5.17.3 contains a cross-site scripting XSS. Stored XSS can be submitted via the Book Info's Long Description Body, and all actions to open or preview the books page will result in the triggering the stored XSS...
