Kernel: net: using kernel space address bits to derive IP ID may potentially break KASLR

A flaw was found in the way the Linux kernel derived the IP ID field from a partial kernel space address returned by a nethashmix function. A remote user could observe this IP ID field to extract the kernel address bits used to derive its value, which may result in leaking the hash key and...

exiv2: null-pointer dereference in http.c causing denial of service

http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service crash due to a NULL pointer dereference by returning a crafted response that lacks a space character...

CVE-2020-10641: Improper Access Control

An unprotected logging route may allow an attacker to write endless log statements into the database without space limits or authentication. This results in consuming the entire available hard-disk space on the Ignition 8 Gateway versions prior to 8.0.10, causing a denial-of-service condition...

UBUNTU-CVE-2020-12135

bson before 0.8 incorrectly uses int rather than sizet for many variables, parameters, and return values. In particular, the bsonensurespace parameter bytesNeeded could have an integer overflow via properly constructed bson input...

JetBrains Space Chats Cross-Site Scripting Vulnerability

JetBrains Space is a team collaboration solution from the Czech company JetBrains. The product supports online chat, online meetings, code review and package repository, etc. Chats is one of the online chat components. A cross-site scripting vulnerability exists in Chats in JetBrains Space versio...

JetBrains Space Code Issue Vulnerability

JetBrains Space is a team collaboration solution from the Czech company JetBrains. The product supports features such as online chat, online meetings, code review and package repository. A security vulnerability exists in JetBrains Space version 2020-04-22 and earlier, which can be exploited by...

JetBrains Space License Issue Vulnerability

JetBrains Space is a team collaboration solution from the Czech company JetBrains. The product supports features such as online chat, online meetings, code review and package repository. A security vulnerability exists in JetBrains Space version 2020-04-22 and earlier that stems from insecure...

CVE-2020-11796

In JetBrains Space through 2020-04-22, the password authentication implementation was insecure...

CVE-2020-11795

In JetBrains Space through 2020-04-22, the session timeout period was configured improperly...

CVE-2020-11795

In JetBrains Space through 2020-04-22, the session timeout period was configured improperly...

CVE-2020-11796

In JetBrains Space through 2020-04-22, the password authentication implementation was insecure...

CVE-2020-11416

JetBrains Space through 2020-04-22 allows stored XSS in Chats...

CVE-2020-11416

JetBrains Space through 2020-04-22 allows stored XSS in Chats...

Code injection

In JetBrains Space through 2020-04-22, the session timeout period was configured improperly...

Authentication flaw

In JetBrains Space through 2020-04-22, the password authentication implementation was insecure...

Cross site scripting

JetBrains Space through 2020-04-22 allows stored XSS in Chats...

CVE-2020-11796

CVE-2020-11796 concerns a vulnerability in JetBrains Space where, through 2020-04-22, the password authentication implementation was insecure. The connected CNVD entry explicitly notes a vulnerability in Space versions up to 2020-04-22 that allows an attacker to bypass security restrictions due t...

CVE-2020-11796

In JetBrains Space through 2020-04-22, the password authentication implementation was insecure...

CVE-2020-11795

In JetBrains Space through 2020-04-22, the session timeout period was configured improperly...

CVE-2020-11795

JetBrains Space (through 2020-04-22) has a session timeout misconfiguration affecting the Space component, per CVE-2020-11795. Connected sources confirm Space’s session timeout issue existed in versions up to 2020-04-22, described as an improper session timeout configuration. The JetBrains Q1-202...