CVE-2020-15096

CVE-2020-15096 affects Electron before versions 6.1.1, 7.2.4, 8.2.4, and 9.0.0-beta21. A context isolation bypass allows code running in the renderer’s main world context to reach into the isolated Electron context and perform privileged actions. The issue impacts apps that enable contextIsolatio...

OCS Inventory NG < 2.9 RCE Vulnerability

OCS Inventory NG is prone to an authenticated remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Discourse < 2.5.0.beta6 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

PT-2020-13506 · Os4Ed · Opensis

Name of the Vulnerable Software and Affected Versions: openSIS versions prior to 7.5 Description: The issue allows SQL Injection. Recommendations: For openSIS versions prior to 7.5, update to version 7.5 or later to resolve the issue...

ECDSA signature vulnerability of Minerva timing attack in jsrsasign

Impact ECDSA side-channel attack named Minerava have been found and it was found that it affects to jsrsasign. Execution time of thousands signature generation have been observed then EC private key which is scalar value may be recovered since point and scalar multiplication time depends on bits ...

PT-2020-20730 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.3.4 and earlier Magento versions 2.2.11 and earlier Magento versions 1.14.4.4 and earlier Magento versions 1.9.4.4 and earlier Description: The issue is related to a business logic error that could lead to privilege...

PT-2020-13895 · Gnu +2 · Gnu Bison +2

Name of the Vulnerable Software and Affected Versions: GNU Bison versions prior to 3.5.4 Description: The issue allows attackers to cause a denial of service, resulting in an application crash. This can occur when GNU Bison is used with untrusted input and a specific bug happens to cause unsafe...

Icinga 2 < 2.12.0-rc1 Privilege Escalation Vulnerability

Icinga 2 is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:icinga:icinga2";...

PT-2020-13408 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 12.8 through 13.0.1 Description: A Stored Cross-Site Scripting issue allowed the execution of Javascript payloads on the Metrics Dashboard. Recommendations: For GitLab CE/EE versions 12.8 through 13.0.1, update to a...

PT-2020-4047 · Intel · Intel Ism +1

Name of the Vulnerable Software and Affected Versions: IntelR AMT and IntelR ISM versions before 14.0.33 Description: The issue is related to an out-of-bounds read in the IPv6 subsystem, which may allow an unauthenticated user to potentially enable denial of service via network access. This can b...

rConfig <= 3.9.4 Multiple SQL Injection Vulnerabilities

rConfig is prone to multiple SQL injection vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

Elastic Kibana < 6.8.10, 7.x < 7.7.1 XSS Vulnerability - Windows

Kibana is prone to a cross-site scripting vulnerability in the TSVB visualization. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Fedora: Security Advisory for wireshark (FEDORA-2020-ca3d3f15f0)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2020-13663 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.19 Description: The issue arises from incorrect input validation of the module tag option in com modules, allowing for cross-site scripting XSS. Recommendations: For versions prior to 3.9.19, update to version...

Apple Mac OS X Security Update (HT211170) - 01

Apple Mac OS X is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Cacti < 1.2.11 Multiple Vulnerabilities - Linux

Cacti is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cacti:cacti"; ifdescription...

PT-2020-13386 · Cacti +3 · Cacti +3

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.2.11 Description: The issue arises when a user account is disabled in Cacti, but the permissions granted to that account are not immediately invalidated. This means that the disabled account may still have access to...

Dovecot 2.3.0 < 2.3.10 Multiple Vulnerabilities

Dovecot is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2020-13114 · Nginx · Nginx

Name of the Vulnerable Software and Affected Versions: Nginx versions 1.8.0 and earlier Description: The issue concerns HTTP Request Smuggling on Nginx. There are elevated activities targeting Nginx. Recommendations: For Nginx versions 1.8.0 and earlier, update to a version later than 1.8.0 to...

rConfig <= 3.9.5 Multiple Vulnerabilities

rConfig is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...