CVE-2020-13356

An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.8.9. A specially crafted request could bypass Multipart protection and read files in certain specific paths on the server. Affected versions are: =8.8.9, =13.4, =13.5, 13.5.2...

The vulnerability of the Microsoft Visual Studio software development tool lies in its lack of access control mechanisms. This allows attackers to bypass security restrictions and enhance their privileges.

The vulnerability of Microsoft Visual Studio, a software development tool, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass security restrictions and enhance their privileges...

RHEL 7 : libxslt (RHSA-2020:4005)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4005 advisory. libxslt is a library for transforming XML files into other textual formats including HTML, plain text, and other XML representations of the...

Cisco Expressway Series 访问控制错误漏洞

Cisco Expressway is a powerful gateway solution that gives users outside your firewall simple, highly secure access to all collaborative work. An information disclosure vulnerability exists in the TURN server component in Cisco Expressway Software versions prior to X12.6.3. The vulnerability stem...

Google Chrome Blink Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 87.0.4280.66. An attacker can exploit this vulnerability to bypass security restrictions...

Google Chrome 跨站脚本漏洞

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 87.0.4280.66. An attacker can exploit this vulnerability to bypass security restrictions...

Mozilla Firefox ESR Security Advisories (MFSA2020-50, MFSA2020-52) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mozilla Firefox ESR Security Advisories (MFSA2020-50, MFSA2020-52) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Google Chrome WebUSB Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 87.0.4280.66. An attacker can exploit this vulnerability to bypass security restrictions...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions prior to Google chrome 87.0.4280.66 that stems from an improper implementation in cookies. An attacker can exploit this vulnerability to bypass security restrictions...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in the Google Chrome filesystem. An attacker can exploit this vulnerability to bypass security restrictions...

Google Chrome filesystem security bypass vulnerability

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in the Google Chrome filesystem. An attacker can exploit this vulnerability to bypass security restrictions...

Google Chrome WebRTC Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 87.0.4280.66. An attacker can exploit this vulnerability to bypass security restrictions...

Google Chrome sharing security bypass vulnerability

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 87.0.4280.66. An attacker can exploit this vulnerability to bypass security restrictions...

Google Chrome tab preview security bypass vulnerability

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 87.0.4280.66. An attacker can exploit this vulnerability to bypass security restrictions...

Mozilla Thunderbird Security Advisories (MFSA2020-50, MFSA2020-52) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

KLA12012 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, perform cross-site scripting attack, obtain sensitive information, bypass security restrictions, spoof user interface. Below is a...

KLA12008 Multiple vulnerabilities in Apple iTunes

Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. A security vulnerability in...

Microsoft Word Security Feature Bypass Vulnerability (CNVD-2025-17494)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A security feature bypass vulnerability exists in Microsoft Word, which can be exploited by an attacker to bypass security restrictions...

Bugs in Critical Infrastructure Gear Allow Sophisticated Cyberattacks

Two security vulnerabilities in Schneider Electric’s programmable logic controllers PLCs could allow attackers to compromise a PLC and move on to more sophisticated critical infrastructure attacks. PLCs are key pieces of equipment in environments such as electric utilities and factories. They...