DEBIAN-CVE-2020-10767

A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB Indirect Branch Prediction Barrier. The IBPB mitigation will be disabled when STIBP is not available or when the Enhanced Indirect Branch Restricted Speculation IBRS is available. This flaw allows a loc...

KaiOS Contacts Cross-Site Scripting Vulnerability

KaiOS is a Linux-based mobile operating system. A cross-site scripting vulnerability vulnerability exists in KaiOS versions 2.5 and 2.5.1. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute...

PT-2020-15385

Name of the Vulnerable Software and Affected Versions Rukovoditel Project Management app version 2.6 Description The issue allows an attacker to add JavaScript code to the filename, potentially leading to Cross Site Scripting XSS attacks. Recommendations For version 2.6, update to a newer version...

jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

PT-2020-15584

Name of the Vulnerable Software and Affected Versions: xxl-job version 2.2.0 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the AppName and AddressList parameters in the...

UBUNTU-CVE-2020-14382

A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively invoked on every device/image presenting itself as LUKS2 container. The bug is in segments validation code in file 'lib/luks2/luks2jsonmetadata.c' in function...

Trend Micro Vulnerability Protection LDAP Authentication Bypass Vulnerability

Trend Micro Vulnerability Protection is an endpoint vulnerability protection product that provides one step faster and stronger endpoint protection. An LDAP authentication bypass vulnerability exists in Trend Micro Vulnerability Protection 2.0 SP2, which can be exploited by an attacker to bypass...

jenkins: Stored XSS vulnerability in upstream cause

A flaw was found in Jenkins versions 2.244 and prior and in LTS 2.235.1 and prior. The upstream job's display name is not escaped on build time trend pages which could lead to a stored cross-site scripting XSS vulnerability. The user must have the Agent/Configure permission for this exploit to...

CVE-2020-23655

NavigateCMS 2.9 is affected by Cross Site Scripting XSS on module "Configuration."...

IBM Security Guardium Insights Clickjacking Vulnerability

IBM Security Guardium Insights is a modern hybrid cloud data security hub designed to provide a reliable view of an organization's data security and compliance posture. A clickjacking vulnerability exists in IBM Security Guardium Insights 2.0.1. A remote attacker could exploit this vulnerability ...

VulnCheck KEV: CVE-2020-36720

The Kali Forms plugin for WordPress is vulnerable to Authenticated Options Change in versions up to, and including, 2.1.1. This is due to the updateoption lacking proper authentication checks. This makes it possible for any authenticated attacker to change or delete the plugin's settings...

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.32. It is a heap-based buffer overflow in _bfd_archive_64_bit_slurp_armap in archive64.c.

...

An allocation of memory without limits that could result in the stack clashing with another memory region was discovered in systemd-journald when a program with long command line arguments calls syslog. A local attacker may use this flaw to crash systemd-journald or escalate his privileges. Versions through v240 are vulnerable.

...

jenkins-2-plugins/matrix-auth: Stored XSS vulnerability in Matrix Authorization Strategy Plugin

A flaw was found in the Matrix Authorization Strategy Plugin version 2.6.1 and prior. User names are not escaped in the permission table which could lead to a stored cross-site scripting XSS vulnerability. The user must have the Agent/Configure, Job/Configure, or Overall/Administer permissions fo...

CVE-2020-8911

A padding oracle vulnerability exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. The SDK allows users to encrypt files with AES-CBC without computing a Message Authentication Code MAC, which then allows an attacker who has write access to the target's S3 bucket and can observe...

PT-2020-20364

Name of the Vulnerable Software and Affected Versions AWS S3 Crypto SDK for GoLang versions prior to V2 Description A padding oracle vulnerability exists in the AWS S3 Crypto SDK for GoLang, allowing an attacker with write access to the target's S3 bucket and the ability to observe decryption...

OPENSUSE-SU-2020:1156-1 Security update for python-rtslib-fb

This update for python-rtslib-fb fixes the following issues: - Update to version v2.1.73 bsc1173257 CVE-2020-14019: version 2.1.73 savetofile: fix fd open mode saveconfig: copy temp configfile with permissions saveconfig: open the temp configfile with modes set Fix 'is not' with a literal...

PgHero gem cross-site request forgery vulnerability

PgHero gem is a performance dashboard package for PostgreSQL by Andrew Kane Software Developers, USA. A cross-site request forgery vulnerability exists in PgHero gem version 2.6.0 and earlier. The vulnerability stems from a WEB application that does not adequately validate that a request is comin...

kernel: Indirect branch speculation can be enabled after it was force-disabled by the PR_SPEC_FORCE_DISABLE prctl command.

A flaw was found in the prctl function, where it can be used to enable indirect branch speculation after it has been disabled. This call incorrectly reports it as being 'force disabled' when it is not and opens the system to Spectre v2 attacks. The highest threat from this vulnerability is to...

SUSE-SU-2020:2109-1 Security update for python-rtslib-fb

This update for python-rtslib-fb fixes the following issues: - Update to version v2.1.73 bsc1173257 CVE-2020-14019: version 2.1.73 savetofile: fix fd open mode saveconfig: copy temp configfile with permissions saveconfig: open the temp configfile with modes set Fix 'is not' with a literal...