CVE-2020-9613

CVE-2020-9613 affects Adobe Acrobat and Reader, with multiple versions listed as vulnerable up to 2020.006.20042 and earlier (and older branches such as 2017.011.30166 and 2015.006.30518). The available connected data consistently describe a security bypass vulnerability that could bypass built-i...

CVE-2020-9613

Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have a security bypass vulnerability. Successful exploitation could lead to security feature bypass...

CVE-2020-9614

CVE-2020-9614 affects Adobe Acrobat and Reader with multiple legacy versions (e.g., Acrobat/Reader 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2015.006.30518 and earlier). The connected documents consistently describe a security feature bypass vulnerability in these products, allowing...

CVE-2020-9614

Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have a security bypass vulnerability. Successful exploitation could lead to security feature bypass...

CVE-2020-9592

Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have a security bypass vulnerability. Successful exploitation could lead to security feature bypass...

CVE-2020-9592

CVE-2020-9592 is described in the provided documents as a security feature bypass affecting Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier; exploitation could bypass security features. The connected Nessus entries corrobora...

Hackers Using Google Analytics to Bypass Web Security and Steal Credit Cards

Researchers reported on Monday that hackers are now exploiting Google's Analytics service to stealthily pilfer credit card information from infected e-commerce sites. According to several independent reports from PerimeterX, Kaspersky, and Sansec, threat actors are now injecting data-stealing cod...

Mattermost Server Input Validation Error Vulnerability (CNVD-2020-35440)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. An input validation error vulnerability exists in Mattermost Server versions prior to 5.10.0, which can be exploited by an attacker to bypass security restrictions and modify file IDs...

KLA11822 Use after free vulnerability in Google Chrome

Use after free vulnerability was found in Google Chrome. Malicious users can exploit this vulnerability to cause denial of service, bypass security restrictions. Original advisories Stable Channel Update for Desktop Related products Google-Chrome CVE list CVE-2020-6509 high Solution Update to the...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to bypass existing security restrictions

The vulnerability of the Windows operating system’s kernel is related to the bypassing of security functions. Exploiting this vulnerability allows an attacker to circumvent existing security restrictions...

CVE-2020-13265

CVE-2020-13265 affects GitLab CE/EE, specifically versions 12.5 through 13.0.1, where a flaw allows bypassing email verification. The connected documents (Red Hat, OSV, NVD, CNVD, Nessus NASL, and others) consistently describe this as a user email verification bypass vulnerability in GitLab. The ...

CVE-2020-13961

Strapi before 3.0.2 could allow a remote authenticated attacker to bypass security restrictions because templates are stored in a global variable without any sanitation. By sending a specially crafted request, an attacker could exploit this vulnerability to update the email template for both...

Design/Logic Flaw

Strapi before 3.0.2 could allow a remote authenticated attacker to bypass security restrictions because templates are stored in a global variable without any sanitation. By sending a specially crafted request, an attacker could exploit this vulnerability to update the email template for both...

Command injection

An issue was discovered in Mattermost Server before 5.1. An attacker can bypass intended access control for direct-message channel creation via the Message slash command...

CVE-2020-13961

Strapi before 3.0.2 could allow a remote authenticated attacker to bypass security restrictions because templates are stored in a global variable without any sanitation. By sending a specially crafted request, an attacker could exploit this vulnerability to update the email template for both...

CVE-2020-13961

CVE-2020-13961 affects Strapi before 3.0.2. A remote authenticated attacker can bypass security restrictions by exploiting templates stored in a global variable without sanitation, compelling an update to email templates for password reset and account confirmation via a crafted request. Impact is...

Security Bulletin: Multiple vulnerabilities in WebSphere application server affect IBM Workload Scheduler

Summary There are multiple vulnerabilities in IBM WebSphere application server that may potentially affect IBM Workload Scheduler. Vulnerability Details CVEID: CVE-2018-1621 DESCRIPTION: IBM WebSphere Application Server could allow a local attacker to obtain clear text password in a trace file...

Vulnerability of the Microsoft Outlook client, Microsoft Office packages and Office 365, as well as the Microsoft Word text editor, related to the ability to bypass security features, allowing attackers to circumvent existing security restrictions.

The vulnerability of the Microsoft Outlook email client, Microsoft Office packages and Office 365, as well as the Microsoft Word text editor, is related to the bypassing of security features. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions...

CVE-2020-13882

CISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition. The routine to check the log and report file permissions was not working as intended and could be bypassed locally. Because of the race, an unprivileged attacker can set up a log and report file, and contro...

Phishing Campaign Targeting Office 365, Exploits Brand Names

Researchers have discovered a sophisticated new phishing campaign that uses recognized brand names to bypass security filters as well as to trick victims into giving up Microsoft Office 365 credentials to gain access to corporate networks. A new report from Check Point Software first observed the...