Foxit Reader Type Obfuscation Vulnerability (CNVD-2021-04407)

Foxit Reader is a PDF document reader. A type confusion vulnerability exists in Foxit Reader, which can be exploited by a remote attacker to submit a special file request and trick the user into parsing it, which can crash the application or execute arbitrary code in the application context...

Information disclosure

lib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property e.g., proto can be copied during a merge or clone operation...

Authorization Bypass

chromium is vulnerable to authorization bypass. A missing case for handling special schemes in permission request checks in Extensions allows an attacker to install a malicious extension on a victim's host to bypass extension permission checks for privileged pages via a malicious Chrome Extension...

The vulnerability in the subscription subsystem of Cisco AsyncOS allows a hacker to increase their privileges.

The vulnerability of the subscription subsystem for Cisco AsyncOS relates to the lack of measures to neutralize special elements used in the operating system command. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Drupal CMS system’s kernel allows a hacker to execute arbitrary code.

The vulnerability of the Drupal CMS system’s kernel is related to insufficient cleaning of special elements in the output data used by the incoming components. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Check Washing

I cant believe that check washing is still a thing: "Check washing" is a practice where thieves break into mailboxes or otherwise steal mail, find envelopes with checks, then use special solvents to remove the information on that check except for the signature and then change the payee and the...

PT-2020-5769 · Kitty +3 · Kitty +3

Name of the Vulnerable Software and Affected Versions: kitty versions prior to 0.19.3 Description: The Graphics Protocol feature in the graphics.c file of kitty allows remote attackers to execute arbitrary code because a filename containing special characters can be included in an error message...

PT-2020-5806 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.35.1 Description: The issue is related to the messages userrights-expiry-current and userrights-expiry-none containing raw HTML, which can lead to XSS when a user visits Special:UserRights without having the righ...

SUSE-SU-2020:14550-1 Security update for python

This update for python fixes the following issues: - bsc1177211 CVE-2020-26116 no longer allowing special characters in the method parameter of HTTPConnection.putrequest in httplib, stopping injection of headers...

UBUNTU-CVE-2020-29003

The PollNY extension for MediaWiki through 1.35 allows XSS via an answer option for a poll question, entered during Special:CreatePoll or Special:UpdatePoll...

MongoDB Code Issues Vulnerabilities

MongoDB is a document-oriented database management system from the American company MongoDB. A code issue vulnerability exists in MongoDB versions v4.2 through 4.2.2. The vulnerability originates from a denial of service in which a user authorized to perform database queries can trigger an...

OPENSUSE-SU-2020:1988-1 Security update for python

This update for python fixes the following issues: - bsc1177211 CVE-2020-26116 no longer allowing special characters in the method parameter of HTTPConnection.putrequest in httplib, stopping injection of headers. This update was imported from the SUSE:SLE-15:Update update project...

The vulnerability of the FXOS operating system, which arises due to the failure to address the issue of eliminating special elements, allows a hacker to execute arbitrary commands with root privileges.

The vulnerability of the FXOS operating system exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands with root privileges...

The vulnerability of the command-line interface of the FXOS operating system allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the command-line interface of the FXOS operating system exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command line. Exploiting this vulnerability allows a perpetrator to execute arbitrary code with root privileges...

OPENSUSE-SU-2020:1859-1 Security update for python

This update for python fixes the following issues: - bsc1177211 CVE-2020-26116 no longer allowing special characters in the method parameter of HTTPConnection.putrequest in httplib, stopping injection of headers. This update was imported from the SUSE:SLE-15:Update update project...

special-coupling.com Cross Site Scripting vulnerability OBB-1486904

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Linux: noexec option on /var/tmp

The noexec mount option specifies that the filesystem cannot contain special devices. Since the /var/tmp filesystem is not intended to support devices, set this option to ensure that users cannot attempt to create block or character special devices in /var/tmp. SPDX-FileCopyrightText: 2020...

PT-2020-6155 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Linux affected versions not specified Description: The issue is related to errors in handling certain AMP packets by the Bluetooth stack implementation in the Linux kernel. This can allow a remote attacker to gain...

Western Digital My Cloud NAS Elevation of Privilege Vulnerability

Western Digital My Cloud is a personal cloud storage device. A security vulnerability exists in the Western Digital My Cloud NAS that can be exploited by a remote attacker to submit a special request that can elevate privileges...

Cross-site Scripting (XSS)

github.com/grafana/grafana is vulnerable to cross-site scripting XSS. The vulnerability exists when specifying series alias such as test data or elastic search, which allows special characters, caused by the bs-typeahead directive that evals the select options passed to it...