MediaWiki cross-site scripting vulnerability (CNVD-2020-74053)

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. MediaWiki before 1.35.1 suffers from a cross-site scripting vulnerability tha...

PT-2020-5978 · Microsoft · Raw Image Extension

Name of the Vulnerable Software and Affected Versions: Raw Image Extension affected versions not specified Description: The issue is related to errors in data type conversion during the parsing of CR3 files by the Raw Image Extension plugin. This can be exploited by an attacker to execute arbitra...

DEBIAN-CVE-2020-35474

In MediaWiki before 1.35.1, the combination of Html::rawElement and Message::text leads to XSS because the definition of MediaWiki:recentchanges-legend-watchlistexpiry can be changed onwiki so that the output is raw HTML...

UBUNTU-CVE-2020-35474

In MediaWiki before 1.35.1, the combination of Html::rawElement and Message::text leads to XSS because the definition of MediaWiki:recentchanges-legend-watchlistexpiry can be changed onwiki so that the output is raw HTML...

PT-2020-6677 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.35.1 Description: The issue exists due to the lack of protection for the web page structure in MediaWiki, specifically with the combination of Html::rawElement and Message::text. This can be exploited by a remote...

CVE-2020-27045

In CESendRawFrame of cemain.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2020-27048

In RWSendRawFrame of rwmain.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2020-27045

In CESendRawFrame of cemain.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

Use after free triggered by block frontend in Linux blkback

ISSUE DESCRIPTION The Linux kernel PV block backend expects the kernel thread handler to reset ring-xenblkd to NULL when stopped. However, the handler may not have time to run if the frontend quickly toggle between the states connect and disconnect. As a consequence, the block backend may re-use ...

CVE-2020-27833

A Zip Slip vulnerability was found in the oc binary in openshift-clients where an arbitrary file write is achieved by using a specially crafted raw container image .tar file which contains symbolic links. The vulnerability is limited to the command oc image extract. If a symbolic link is first...

SUSE SLES15 Security Update : kernel (SUSE-SU-2020:3532-1)

The SUSE Linux Enterprise 15 LTSS kernel was updated to receive various security and bug fixes. The following security bugs were fixed : CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path remote...

Cross-site Scripting (XSS)

MediaWiki is vulnerable to cross-site scripting XSS. Allowing an attacker to modify messages is include raw HTML which NS filter uses unescaped messages as keys in the option key for an HTMLForm specifier...

The vulnerability of the MSRawImage Store Raw2Image method in the Raw Image Extension plugin allows a hacker to execute arbitrary code.

The vulnerability of the MSRawImage Store Raw2Image plugin’s Raw Image Extension lies in the fact that it involves writing beyond the buffer memory boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created file...

The vulnerability of the Raw Image Extension plugin, related to writing beyond the buffer memory boundaries, allows an attacker to execute arbitrary code.

The vulnerability of the Raw Image Extension plugin is related to writing beyond the buffer memory boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created file...

The vulnerability of the Raw Image Extension plugin, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the Raw Image Extension plugin is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Nomad's Raw File View Vulnerable to Cross-Site Scripting

Summary A vulnerability was identified in Nomad and Nomad Enterprise “Nomad” such that files from a malicious workload could cause arbitrary JavaScript to execute in the web UI. This vulnerability, CVE-2020-10944, affects all Nomad versions since 0.3 and is fixed in the 0.10.5 release. Background...

The vulnerability of the plugin for viewing RAW images relates to the issue of data being written beyond the buffer boundaries, allowing an attacker to execute arbitrary code.

The vulnerability of the plugin for viewing RAW images is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the plugin for viewing RAW images relates to the issue of data being written beyond the buffer boundaries, allowing an attacker to execute arbitrary code.

The vulnerability of the plugin for viewing RAW images is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Raw Image Extension Remote Code Execution Vulnerability (CNVD-2021-24026)

Raw Image Extension is an image extension application developed by Microsoft that allows you to view images in Raw format. A remote code execution vulnerability exists in versions prior to Raw Image Extension 1.0.32861.0. An attacker can exploit this vulnerability to achieve remote code execution...

Raw Image Extension Remote Code Execution Vulnerability (CNVD-2021-24028)

Raw Image Extension is an image extension application developed by Microsoft that allows you to view images in Raw format. A remote code execution vulnerability exists in versions prior to Raw Image Extension 1.0.32861.0. An attacker can exploit this vulnerability to achieve remote code execution...