Design/Logic Flaw

JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler...

CVE-2020-25207

JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler...

CVE-2020-25207

CVE-2020-25207 affects JetBrains Toolbox prior to version 1.18. The vulnerability enables remote code execution via a browser protocol handler, with CVSS 3.1 base score 9.8 (CRITICAL). Connected documents confirm the issue and vector but do not specify a patched version; no exploitation details a...

CVE-2020-25013

JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler...

CVE-2020-25013

CVE-2020-25013 : JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service through a browser protocol handler. The issue arises in the tool’s handling of browser protocol links, allowing a DoS condition. Connected sources corroborate the vendor advisory and related security bulle...

JetBrains Toolbox 安全漏洞

JetBrains Toolbox is a JetBrains product management application from the Czech company JetBrains. A denial-of-service vulnerability exists in JetBrains ToolBox versions prior to 1.18, which stems from susceptibility to denial-of-service attacks via the browser protocol handler. No detailed...

JetBrains Toolbox 安全漏洞

JetBrains Toolbox is a JetBrains product management application from the Czech company JetBrains. A remote code execution vulnerability exists in JetBrains ToolBox versions prior to 1.18, which stems from vulnerability to attacks that execute remote code via a browser protocol handler. No details...

PT-2020-15888

Name of the Vulnerable Software and Affected Versions JetBrains ToolBox versions prior to 1.18 Description The issue is related to a Denial of Service attack via a browser protocol handler. Recommendations For versions prior to 1.18, update to version 1.18 or later to resolve the issue...

PT-2020-16017

Name of the Vulnerable Software and Affected Versions JetBrains ToolBox versions prior to 1.18 Description The issue allows for Remote Code Execution via a browser protocol handler. Recommendations For versions prior to 1.18, update to version 1.18 or later to resolve the issue...

CVE-2020-25207: Undefined Security Weakness

JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler...

CVE-2020-25013: Undefined Security Weakness

JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler...

Denial Of Service (DoS)

firefox is vulnerable to denial of service DoS. If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an extern...

CVE-2020-15680

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This...

CVE-2020-15680

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This...

Design/Logic Flaw

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This...

CVE-2020-15680

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This...

CVE-2020-15680

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This...

CVE-2020-15680

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This...

CVE-2020-15680

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This...

CVE-2020-15680

CVE-2020-15680 affects Firefox ≤ 82.0 where referencing a valid external protocol handler in an image tag lets an attacker probe if a protocol handler is registered by distinguishing broken image sizes. The underlying issue is an information disclosure vulnerability related to image tag handling ...