CVE-2020-25207

JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler...

CVE-2020-25207

CVE-2020-25207 affects JetBrains Toolbox prior to version 1.18. The vulnerability enables remote code execution via a browser protocol handler, with CVSS 3.1 base score 9.8 (CRITICAL). Connected documents confirm the issue and vector but do not specify a patched version; no exploitation details a...

CVE-2020-25013

CVE-2020-25013 : JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service through a browser protocol handler. The issue arises in the tool’s handling of browser protocol links, allowing a DoS condition. Connected sources corroborate the vendor advisory and related security bulle...

CVE-2020-25013

JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler...

JetBrains Toolbox 安全漏洞

JetBrains Toolbox is a JetBrains product management application from the Czech company JetBrains. A remote code execution vulnerability exists in JetBrains ToolBox versions prior to 1.18, which stems from vulnerability to attacks that execute remote code via a browser protocol handler. No details...

JetBrains Toolbox 安全漏洞

JetBrains Toolbox is a JetBrains product management application from the Czech company JetBrains. A denial-of-service vulnerability exists in JetBrains ToolBox versions prior to 1.18, which stems from susceptibility to denial-of-service attacks via the browser protocol handler. No detailed...

Denial Of Service (DoS)

firefox is vulnerable to denial of service DoS. If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an extern...

CVE-2020-15680

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This...

CVE-2020-15680

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This...

Design/Logic Flaw

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This...

CVE-2020-15680

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This...

CVE-2020-15680

CVE-2020-15680 affects Firefox ≤ 82.0 where referencing a valid external protocol handler in an image tag lets an attacker probe if a protocol handler is registered by distinguishing broken image sizes. The underlying issue is an information disclosure vulnerability related to image tag handling ...

CVE-2020-15680

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This...

CVE-2020-15680

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This...

CVE-2020-15680

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This...

UBUNTU-CVE-2020-15680

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This...

Security Vulnerabilities fixed in Firefox 82 — Mozilla

A use-after-free bug in the usersctp library was reported upstream. We assume this could have led to memory corruption and a potentially exploitable crash. In the crossbeam rust crate, the bounded channel incorrectly assumed that Vec::fromiter had allocated capacity that was the same as the numbe...

Oracle Linux 7 : curl (ELSA-2020-3916)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-3916 advisory. - Fix TFTP small blocksize heap buffer overflow https://curl.haxx.se/docs/CVE-2019-5482.htmlCVE-2019-5482Orabug: 30568724 - CVE-2016-8615 cookie injection for...

CVE-2020-3430 Cisco Jabber for Windows Protocol Handler Command Injection Vulnerability

A vulnerability in the application protocol handling features of Cisco Jabber for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands. The vulnerability is due to improper handling of input to the application protocol handlers. An attacker could exploit this...

CVE-2020-3430 Cisco Jabber for Windows Protocol Handler Command Injection Vulnerability

A vulnerability in the application protocol handling features of Cisco Jabber for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands. The vulnerability is due to improper handling of input to the application protocol handlers. An attacker could exploit this...