CVE-2020-13928

Apache Atlas before 2.1.0 contain a XSS vulnerability. While saving search or rendering elements values are not sanitized correctly and because of that it triggers the XSS vulnerability...

CVE-2020-13928

Apache Atlas before 2.1.0 contain a XSS vulnerability. While saving search or rendering elements values are not sanitized correctly and because of that it triggers the XSS vulnerability...

Exploit for CVE-2020-1472

CVE-2020-1472 Netlogon Remote Protocol Call MS-NRPC Privileg...

Exploit for CVE-2020-1472

CVE-2020-1472 POC The vulnerability can be exploited in a Wi...

CVE-2020-14304

A memory disclosure flaw was found in the Linux kernel's ethernet drivers, in the way it read data from the EEPROM of the device. This flaw allows a local user to read uninitialized values from the kernel memory. The highest threat from this vulnerability is to confidentiality...

Exploit for CVE-2020-1472

CVE-2020-1472 CVE-2020-...

Exploit for CVE-2020-1472

Ladon Moudle CVE-2020-1472 Ex...

Exploit for CVE-2020-1472

The reproduction process has a minor bug; after restarting, it g...

Exploit for CVE-2020-1472

CVE-2020-1472 Process of rep...

CVE-2020-11683

A timing side channel was discovered in AT91bootstrap before 3.9.2. It can be exploited by attackers with physical access to forge CMAC values and subsequently boot arbitrary code on an affected system...

CVE-2020-11683

A timing side channel was discovered in AT91bootstrap before 3.9.2. It can be exploited by attackers with physical access to forge CMAC values and subsequently boot arbitrary code on an affected system...

CVE-2020-13304: Use of Insufficiently Random Values

A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Same 2 factor Authentication secret code was generated which resulted an attacker to maintain access under certain conditions...

CVE-2020-25282

An issue was discovered on LG mobile devices with Android OS 10 software. The lguicc software for the LG Universal Integrated Circuit Card allows attackers to bypass intended access restrictions on property values. The LG ID is LVE-SMP-200020 September 2020...

Design/Logic Flaw

An issue was discovered on LG mobile devices with Android OS 10 software. The lguicc software for the LG Universal Integrated Circuit Card allows attackers to bypass intended access restrictions on property values. The LG ID is LVE-SMP-200020 September 2020...

GHSA-2XW5-3767-QXVM Malicious Package in ng-ui-library

Version 1.0.987 of ng-ui-library contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment and evaluat...

CVE-2020-16214

In Patient Information Center iX PICiX Versions B.02, C.02, C.03, the software saves user-provided information into a comma-separated value CSV file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by spreadshee...

PT-2020-16062

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS 10 software Description An issue was discovered that allows attackers to bypass intended access restrictions on property values. This is related to the lguicc software, which is used for the LG Universal...

CVE-2020-25282: Missing Authorization

An issue was discovered on LG mobile devices with Android OS 10 software. The lguicc software for the LG Universal Integrated Circuit Card allows attackers to bypass intended access restrictions on property values. The LG ID is LVE-SMP-200020 September 2020...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5845)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5845 advisory. - sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices Dave Chiluk Orabug: 31350999 CVE-2019-19922 - sched/fai...

postgresql: Selectivity estimators bypass row security policies

PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain values taken from the column. PostgreSQL does not evaluate row security policies before consulting those statistics during query planning; an attacker can exploit thi...