5842 matches found
CVE-2020-8951
Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the Source or Destination field of the Configuration Manager Configuration Parameter Translation page...
Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting
Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting Exploit Title: Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting Release Date: 2019-12-11 Exploit Authors: Dan Bohan, Scott Goodwin, OCD Tech Vendor Homepage: https://www.avaya.com/en/ Softwa...
Avaya IP Office Application Server 11.0.0.0 Cross Site Scripting
Exploit Title: Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting Release Date: 2019-12-11 Exploit Authors: Dan Bohan, Scott Goodwin, OCD Tech Vendor Homepage: https://www.avaya.com/en/ Software Link: https://www.avaya.com/en/products/unified-communications/voip/...
Open-Xchange App Suite / Documents Server-Side Request Forgery
Product: OX App Suite / OX Documents Vendor: OX Software GmbH Internal reference: 67871, 68258 Bug ID Vulnerability type: Server-Side Request Forgery CWE-918 Vulnerable version: 7.10.2 and earlier Vulnerable component: backend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed...
PT-2020-15321 · Jenkins · Jenkins S3 Publisher Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins S3 publisher Plugin versions 0.11.4 and earlier Description: The issue concerns the transmission of configured credentials in plain text as part of the global Jenkins configuration form, potentially leading to their exposure. This...
Microsoft Windows Secure Boot Security Feature Bypass Vulnerability (KB4502496)
This host is missing an important security update according to Microsoft KB4502496 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
VIM 8.2 Denial Of Service
Exploit Title: Invalid memory access with search command Date: 17-12-2019 Vulnerability: DoS Vulnerability Discovery: Dhiraj Mishra Vulnerable Version: VIM - Vi IMproved 8.2 Included patches: 1-131 Vendor Homepage: https://www.vim.org/ References:...
MariaDB 'CVE-2020-2574' Denial of Service Vulnerability - Windows
MariaDB is prone to a Denial of Service vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb"; if...
Nextcloud Server < 14.0.13, < 15.0.9, < 16.0.2 XSS Vulnerability (NC-SA-2019-018)
Nextcloud Server is prone to a cross-site scripting vulnerability in the svg logo generation. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...
UBUNTU-CVE-2020-8124
Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks...
Citrix Application Delivery Controller (ADC) and Gateway 13.0 - Path Traversal Exploit
Exploit for multiple platform in category web applications Exploit Title: Citrix Application Delivery Controller ADC and Gateway 13.0 - Path Traversal CVE: CVE-2019-19781 Vulenrability: Path Traversal Vulnerablity Discovery: Mikhail Klyuchnikov Exploit Author: Dhiraj Mishra Vulnerable Version:...
UBUNTU-CVE-2020-2692
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle V...
OX App Suite 7.10.2 Cross Site Scripting / Improper Access Control
Product: OX App Suite Vendor: OX Software GmbH Internal reference: 67097 Bug ID Vulnerability type: Cross-site scripting CWE-80 Vulnerable version: 7.10.2 and earlier Vulnerable component: backend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.10.2-rev14,...
chellow (>=2050.0.0 <=2230.0.0), dcicsnovault (>=2.0.0b0 <=2.0.0b11) +11 more potentially affected by CVE-2019-16785 via waitress (>=0.8.10 <=1.3.1)
waitress PYPI version =0.8.10, =2050.0.0, =2.0.0b0, =1.4.0, =17.4.0, =1.1.0.dev20170908, =1.3.7, =0.9.1, =1.0.3, =1.0.4 Source cves: CVE-2019-16785 Source advisory: OSV:PYSEC-2019-136...
WECON PLC Editor
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: WECON Equipment: PLC Editor Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation could allow an attacker to execute code under the privileges of the application. 3. TECHNICAL DETAILS...
Dovecot < 2.2.2 DoS Vulnerability
Dovecot is prone to a Denial of Service vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you ca...
PT-2019-15958 · Atasm · Atasm
Name of the Vulnerable Software and Affected Versions: ATasm version 1.06 Description: The issue is a stack-based buffer overflow in the get signed expression function, located in setparse.c, which can be triggered by a crafted .m65 file. Recommendations: For ATasm version 1.06, as a temporary...
PT-2019-5529
Name of the Vulnerable Software and Affected Versions libxml2 version 2.9.10 Description The issue is related to the xmlStringLenDecodeEntities function in the libxml2 library, which can lead to an infinite loop under certain end-of-file conditions. This could allow a remote attacker to cause a...
forma.lms <= 2.2.1 Multiple SQL Injection Vulnerabilities
Forma Learning Management System is prone to multiple SQL injection vulnerabilities. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as...