3835 matches found
CVE-2020-7668
In all versions of the package github.com/unknwon/cae/tz, the ExtractTo function doesn't securely escape file paths in zip archives which include leading or non-leading "..". This allows an attacker to add or replace files system-wide...
CVE-2020-7664
In all versions of the package github.com/unknwon/cae/zip, the ExtractTo function doesn't securely escape file paths in zip archives which include leading or non-leading "..". This allows an attacker to add or replace files system-wide...
CVE-2020-7664: Improper Limitation of a Pathname to a Restricted Directory
In all versions of the package github.com/unknwon/cae/zip, the ExtractTo function doesn't securely escape file paths in zip archives which include leading or non-leading "..". This allows an attacker to add or replace files system-wide...
PT-2020-19692
Name of the Vulnerable Software and Affected Versions github.com/unknwon/cae/zip affected versions not specified Description The ExtractTo function does not securely escape file paths in zip archives, which include leading or non-leading "..". This allows an attacker to add or replace files...
Mids Reborn Hero Designer Code Issue Vulnerability
Mids Reborn Hero Designer is a suite of game character design software from Jason Thompson Software Developers. A code issue vulnerability exists in Mids Reborn Hero Designer version 2.6.0.7, which stems from the program failing to assign safe default permissions to the installation path, and can...
Unspecified Vulnerability in Mids Reborn Hero Designer
Mids Reborn Hero Designer is a suite of game character design software from Jason Thompson Software Developers. A security vulnerability exists in Mids Reborn Hero Designer version 2.6.0.7, which can be exploited by an attacker to execute an executable file in a user's context by performing a...
CVE-2020-11614
Mids' Reborn Hero Designer 2.6.0.7 downloads the update manifest, as well as update files, over cleartext HTTP. Additionally, the application does not perform file integrity validation for files after download. An attacker can perform a man-in-the-middle attack against this connection and replace...
Description of the security update for SharePoint Foundation 2013: June 9, 2020
Description of the security update for SharePoint Foundation 2013: June 9, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the...
Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: June 9, 2020
None None...
Description of the security update for SharePoint Server 2010: June 9, 2020
Description of the security update for SharePoint Server 2010: June 9, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the followin...
CVE-2020-13866
WinGate v9.4.1.5998 has insecure permissions for the installation directory, which allows local users to gain privileges by replacing an executable file with a Trojan horse...
CVE-2020-7676
angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping "" elements in "" ones changes parsing behavior, leading to possibly unsanitizing code...
CVE-2020-7676
angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping "" elements in "" ones changes parsing behavior, leading to possibly unsanitizing code...
Cross site scripting
angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping "" elements in "" ones changes parsing behavior, leading to possibly unsanitizing code...
UBUNTU-CVE-2020-7676
angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping "" elements in "" ones changes parsing behavior, leading to possibly unsanitizing code...
CVE-2020-7676
angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping "" elements in "" ones changes parsing behavior, leading to possibly unsanitizing code...
CVE-2020-7676
angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping "" elements in "" ones changes parsing behavior, leading to possibly unsanitizing code...
PT-2020-19701
Name of the Vulnerable Software and Affected Versions angular.js versions prior to 1.8.0 Description The issue allows cross-site scripting due to the regex-based input HTML replacement potentially turning sanitized code into unsanitized code. This can occur when elements are wrapped in elements,...
CVE-2020-7676: Improper Neutralization of Input During Web Page Generation
angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping " " elements in " " ones changes parsing behavior, leading to possibly unsanitizing code...
