4746 matches found
GitLab Username Format Restriction Bypass Vulnerability
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. A vulnerability exists in GitLab versions prior to 13.1 that can be exploited to bypass the usernam...
GitLab Authorization Issues Vulnerability (CNVD-2020-57832)
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab versions prior ...
libpng: does not check length of chunks against user limit
libpng before 1.6.32 does not properly check the length of chunks against the user limit...
Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.
...
The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory.
...
CVE-2020-26101
In cPanel before 88.0.3, insecure RNDC credentials are used for BIND on a templated VM SEC-549...
CVE-2020-24621
A remote code execution RCE vulnerability was discovered in the htmlformentry aka HTML Form Entry module before 3.11.0 for OpenMRS. By leveraging path traversal, a malicious Velocity Template Language file could be written to a directory. This file could then be accessed and executed...
PT-2020-14280 · Google +1 · Tensorflow +1
Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 1.15.4 TensorFlow versions prior to 2.0.3 TensorFlow versions prior to 2.1.2 TensorFlow versions prior to 2.2.1 TensorFlow versions prior to 2.3.1 Description: A crafted TFLite model can force a node to have as...
Mozilla Firefox Security Advisories (MFSA2020-42, MFSA2020-43) - Mac OS X
Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...
PT-2020-15021 · Powerdns +4 · Powerdns Authoritative Server +4
Name of the Vulnerable Software and Affected Versions: PowerDNS Authoritative Server versions prior to 4.3.1 Description: An issue has been found where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory...
Google Chrome Extension Policy Enforcement Deficiency Vulnerability (CNVD-2020-53302)
Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An extension policy enforcement deficiency vulnerability exists in versions of Google Chrome prior to 85.0.4183.121. An attacker can exploit this vulnerability to...
UBUNTU-CVE-2020-6542
Use after free in ANGLE in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
LibRaw Buffer Overflow Vulnerability (CNVD-2020-59710)
LibRaw is a C++ library from the LibRaw team for processing RAW CRW/CR2, NEF, RAF, DNG, andothers format images. A buffer overflow vulnerability exists in LibRaw versions prior to 20.0. The vulnerability originates from LibRaw:: GetNormalizedModel in src/metadata/normalizemodel.cpp. An attacker c...
CVE-2020-24374
A DNS rebinding vulnerability in Freebox v5 before 1.5.29...
UBUNTU-CVE-2020-24889
A buffer overflow vulnerability in LibRaw version 20.0 LibRaw::GetNormalizedModel in src/metadata/normalizemodel.cpp may lead to context-dependent arbitrary code execution...
Kingsoft WPS Office Remote Heap Corruption Vulnerability
WPS Office is an office software released by Kingsoft Corporation Kingsoft, which can be applied to the most commonly used functions of office software, such as text editing, spreadsheets and presentations. A remote heap corruption vulnerability exists in Kingsoft WPS Office versions prior to...
GHSA-48GC-5J93-5CFQ Path Traversal in serve
Versions of serve prior to 10.1.2 are vulnerable to Path Traversal. Explicitly ignored folders can be accessed through relative paths, which allows attackers to access hidden folders and files. Recommendation Upgrade to version 10.1.2 or later...
Google Chrome Code Execution Vulnerability (CNVD-2020-60510)
Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 85.0.4183.102, which can be exploited by remote attackers to execute arbitrary code on a system or cause a denial of service condition...
GHSA-QGFR-5HQP-VRW9 Path Traversal in decompress
Versions of decompress prior to 4.2.1 are vulnerable to Arbitrary File Write. The package fails to prevent extraction of files with relative paths, allowing attackers to write to any folder in the system by including filenames containing../. Recommendation Upgrade to version 4.2.1 or later...