WordPress Content Management System Data Compromise

The vulnerability of the WordPress website content management system is related to a configuration error. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...

CVE-2020-10634

CVE-2020-10634 affects the SAE IT-systems FW-50 Remote Telemetry Unit (RTU). The vulnerability is a Path Traversal (IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY) that could allow a remote attacker to view the device file structure and access restricted files through a specially cra...

PT-2020-12260

Name of the Vulnerable Software and Affected Versions SAE IT-systems FW-50 Remote Telemetry Unit RTU affected versions not specified Description A specially crafted request could allow an attacker to view the file structure of the affected device and access files that should be inaccessible...

CVE-2020-10634: Improper Limitation of a Pathname to a Restricted Directory

SAE IT-systems FW-50 Remote Telemetry Unit RTU. A specially crafted request could allow an attacker to view the file structure of the affected device and access files that should be inaccessible...

exiv2: out of bounds read in IptcData::printStructure in iptc.c

An out-of-bounds read vulnerability has been discovered in IptcData::printStructure in iptc.cpp file of Exiv2 0.26. An attacker could cause a crash or an information leak by providing a crafted image...

exiv2: infinite recursion in Exiv2::Image::printTiffStructure in file image.cpp resulting in denial of service

An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image::printTiffStructure in the file image.cpp. This can be triggered by a crafted file. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impact...

exiv2: infinite loop in Exiv2::Image::printIFDStructure function in image.cpp

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack...

Rukovoditel Cross-Site Scripting Vulnerability (CNVD-2020-26655)

Rukovoditel is a set of Web-based open source project management software from the Rukovoditel team. The software has project management , customer relationship management and other functions . A cross-site scripting vulnerability exists in the User Access Groups page of the Application Structure...

PT-2020-12871

Name of the Vulnerable Software and Affected Versions Rukovoditel version 2.5.2 Description The issue is related to a stored XSS vulnerability located on the application structure -- user access groups page. This allows an attacker to inject malicious scripts, potentially leading to the theft of...

Firefox Structure Data Compromise

The vulnerability of Firefox browsers is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of data...

WebKit Rendering Module Code Execution

The vulnerability of the rendering module in WebKit operating systems for iOS, tvOS, the multimedia player iTunes for Windows, the browser Safari, and the iCloud for Windows service is related to insufficient protection of the web page structure. Exploiting this vulnerability allows an attacker t...

SharePoint Server XSS

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially...

vRealize Log Insight XSS

The vulnerability of the log management tool vRealize Log Insight is related to the lack of security measures for the website structure. Exploiting this vulnerability could allow a malicious actor to perform a cross-site scripting attack remotely...

SharePoint Server XSS

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially create...

loofah HTML Processing Data Compromise

The vulnerability in the library for processing and transforming HTML/XML code fragments in Ruby Loofah is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

CVE-2020-10893

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Firefox Security Policy Inheritance Unauthorized Access

The vulnerability of the Firefox browser’s security inheritance mechanism is related to the lack of measures to protect the structure of web pages. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to confidential data and compromise data integrity...

Prusa Research PrusaSlicer _3MF_Importer::_handle_end_model() use-after-free vulnerability

Summary A use-after-free vulnerability exists in the 3MFImporter::handleendmodel functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted 3MF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. Tested...

We Need to Change the Structure of Security to Transform Security

We Need to Change the Structure of Security to Transform Security Tom Corn, Senior Vice President of Security Products at VMware, was recently recorded giving his overview of the fundamental problem companies have with security today. His answer — we’ve got too much happening in silos and too muc...

CVE-2019-10621

Use after free issue when MAP and UNMAP calls at same time as data structure used my MAP may be freed by UNMAP function in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in Nicobar, QCS405, Rennell, Saipan, SC8180X, SDX55, SM6150, SM715...