CVE-2020-11416

JetBrains Space Chats suffer from stored XSS through 2020-04-22 due to insufficient validation of client-side data in the web application. Affected component: Space Chats in JetBrains Space (Space product). Root cause (per CNVD-2020-25754): lack of proper validation of client-side data in the WEB...

CVE-2020-11416

JetBrains Space through 2020-04-22 allows stored XSS in Chats...

JetBrains Security Bulletin Q1 2020

FYI News Security JetBrains Security Bulletin Q1 2020 Robert Demmer In the first quarter of 2020, we resolved a number of security issues in our products. Here’s a summary report that contains a description of each issue and the version in which it was resolved. Product | Description | Severity |...

CVE-2020-11795: Insufficient Session Expiration

In JetBrains Space through 2020-04-22, the session timeout period was configured improperly...

PT-2020-12602

Name of the Vulnerable Software and Affected Versions JetBrains Space versions prior to 2020-04-22 Description The issue allows stored XSS in Chats. Recommendations For versions prior to 2020-04-22, update to a version released after 2020-04-22 to resolve the issue...

PT-2020-12852

Name of the Vulnerable Software and Affected Versions JetBrains Space versions prior to 2020-04-22 Description The password authentication implementation in JetBrains Space was insecure. Recommendations For versions prior to 2020-04-22, update to a version released after 2020-04-22 to resolve the...

CVE-2020-11796: Improper Authentication

In JetBrains Space through 2020-04-22, the password authentication implementation was insecure...

CVE-2020-11416: Improper Neutralization of Input During Web Page Generation

JetBrains Space through 2020-04-22 allows stored XSS in Chats...

PT-2020-12851

Name of the Vulnerable Software and Affected Versions JetBrains Space versions prior to 2020-04-22 Description The session timeout period in JetBrains Space was configured improperly, which could lead to issues. Recommendations For versions prior to 2020-04-22, update the configuration to properl...

cheap-web-space-gd.bitpalast.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1146734 Security Researcher raviakp1004 Helped patch 736 vulnerabilities Received 4 Coordinated Disclosure badges Received 6 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

Regular Expression Denial Of Service (ReDoS)

remove-markdown is vulnerable to regex denial of service. An attacker is able to cause the package to consume excess system resources resulting in an application crash using a large number of space characters...

CVE-2020-3653

Possible buffer over-read in windows wlan driver function due to lack of check of length of variable received from userspace in Snapdragon Compute, Snapdragon Connectivity in MSM8998, QCA6390, SC7180, SC8180X, SDM850...

CVE-2019-10556

Missing length check before copying the data from kernel space to userspace through the copy function can lead to buffer overflow in some cases in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

Buffer overflow

Missing length check before copying the data from kernel space to userspace through the copy function can lead to buffer overflow in some cases in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

CVE-2019-10622

Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from userspace in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon...

CVE-2019-10556

Missing length check before copying the data from kernel space to userspace through the copy function can lead to buffer overflow in some cases in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

CVE-2019-10556

CVE-2019-10556: The issue is a missing length check when copying data from kernel space to user space in Qualcomm Snapdragon components, leading to a buffer overflow. Affected devices span Snapdragon Auto, Compute, CE Connectivity, IOT, Industrial IOT, Mobile, Voice & Music, Wearables (list inclu...

CVE-2019-10556: Buffer Copy without Checking Size of Input

Missing length check before copying the data from kernel space to userspace through the copy function can lead to buffer overflow in some cases in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. Two flaws were found in the way the Linux kernel's syssendmsg function, when invoked via the sendmmsg system call, accessed user-space memory. A local, unprivileged user could use these flaws to cause a denial of service...

Denial Of Service (DoS)

spacewalk-backend is vulnerable to denial of service. It was found that a remote attacker could upload packages to an RHN Satellite server's NULL organization without any authorization or authentication. The NULL organization stores packages synced from RHN Hosted. Although an attacker cannot put...