Cross site scripting

JetBrains Space through 2020-04-22 allows stored XSS in Chats...

Code injection

In JetBrains Space through 2020-04-22, the session timeout period was configured improperly...

CVE-2020-11796

In JetBrains Space through 2020-04-22, the password authentication implementation was insecure...

CVE-2020-11796

CVE-2020-11796 concerns a vulnerability in JetBrains Space where, through 2020-04-22, the password authentication implementation was insecure. The connected CNVD entry explicitly notes a vulnerability in Space versions up to 2020-04-22 that allows an attacker to bypass security restrictions due t...

CVE-2020-11795

JetBrains Space (through 2020-04-22) has a session timeout misconfiguration affecting the Space component, per CVE-2020-11795. Connected sources confirm Space’s session timeout issue existed in versions up to 2020-04-22, described as an improper session timeout configuration. The JetBrains Q1-202...

CVE-2020-11795

In JetBrains Space through 2020-04-22, the session timeout period was configured improperly...

CVE-2020-11416

JetBrains Space through 2020-04-22 allows stored XSS in Chats...

CVE-2020-11416

JetBrains Space Chats suffer from stored XSS through 2020-04-22 due to insufficient validation of client-side data in the web application. Affected component: Space Chats in JetBrains Space (Space product). Root cause (per CNVD-2020-25754): lack of proper validation of client-side data in the WEB...

PT-2020-12851

Name of the Vulnerable Software and Affected Versions JetBrains Space versions prior to 2020-04-22 Description The session timeout period in JetBrains Space was configured improperly, which could lead to issues. Recommendations For versions prior to 2020-04-22, update the configuration to properl...

CVE-2020-11795: Insufficient Session Expiration

In JetBrains Space through 2020-04-22, the session timeout period was configured improperly...

CVE-2020-11416: Improper Neutralization of Input During Web Page Generation

JetBrains Space through 2020-04-22 allows stored XSS in Chats...

PT-2020-12602

Name of the Vulnerable Software and Affected Versions JetBrains Space versions prior to 2020-04-22 Description The issue allows stored XSS in Chats. Recommendations For versions prior to 2020-04-22, update to a version released after 2020-04-22 to resolve the issue...

CVE-2020-11796: Improper Authentication

In JetBrains Space through 2020-04-22, the password authentication implementation was insecure...

JetBrains Security Bulletin Q1 2020

FYI News Security JetBrains Security Bulletin Q1 2020 Robert Demmer In the first quarter of 2020, we resolved a number of security issues in our products. Here’s a summary report that contains a description of each issue and the version in which it was resolved. Product | Description | Severity |...

PT-2020-12852

Name of the Vulnerable Software and Affected Versions JetBrains Space versions prior to 2020-04-22 Description The password authentication implementation in JetBrains Space was insecure. Recommendations For versions prior to 2020-04-22, update to a version released after 2020-04-22 to resolve the...

cheap-web-space-gd.bitpalast.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1146734 Security Researcher raviakp1004 Helped patch 736 vulnerabilities Received 4 Coordinated Disclosure badges Received 6 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

Regular Expression Denial Of Service (ReDoS)

remove-markdown is vulnerable to regex denial of service. An attacker is able to cause the package to consume excess system resources resulting in an application crash using a large number of space characters...

CVE-2020-3653

Possible buffer over-read in windows wlan driver function due to lack of check of length of variable received from userspace in Snapdragon Compute, Snapdragon Connectivity in MSM8998, QCA6390, SC7180, SC8180X, SDM850...

CVE-2019-10556

Missing length check before copying the data from kernel space to userspace through the copy function can lead to buffer overflow in some cases in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

Buffer overflow

Missing length check before copying the data from kernel space to userspace through the copy function can lead to buffer overflow in some cases in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...