148 matches found
Updated jasper packages fix security vulnerability
There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary out-of-bounds write. This could potentially affect data confidentiality, integrity, or application availability CVE-2020-27828...
VulnCheck KEV: CVE-2014-3914
Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager TSM in Rocket ServerGraph 1.2 allows remote attackers to 1 create arbitrary files via a .. dot dot in the query parameter in a writeDataFile action to the fileRequestor servlet, execute arbitrary files via a .. dot d...
CVE-2020-27013
Trend Micro Antivirus for Mac 2020 Consumer contains a vulnerability in the product that occurs when a webserver is started that implements an API with several properties that can be read and written to allowing the attacker to gather and modify sensitive product and user data. An attacker must...
DEBIAN-CVE-2020-25741
fdctrlwritedata in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer for the current drive...
UBUNTU-CVE-2020-25741
fdctrlwritedata in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer for the current drive...
CVE-2020-14528
Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0 and 19.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces...
Multiple NETGEAR Product License Issue Vulnerabilities (CNVD-2020-33662)
NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite SRS60 AC3000 and others are a wireless WiFi device from NETGEAR. NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite SRS60 AC3000 version 2.5.1.106, Outdoor Satellite RBS50Y version 2.5.1.106 and Pro Tri-Band Business WiFi An authorization iss...
CVE-2020-6250
SAP Adaptive Server Enterprise, version 16.0, allows an authenticated attacker to exploit certain misconfigured endpoints exposed over the adjacent network, to read system administrator password leading to Information Disclosure. This could help the attacker to read/write any data and even stop t...
PT-2020-6199
Name of the Vulnerable Software and Affected Versions json-c versions 0.14 and earlier Description The issue is related to an integer overflow and out-of-bounds write in json-c, which can be triggered by a large JSON file. This can be demonstrated by the printbuf memappend function. The...
CVE-2020-8599
Trend Micro Apex One 2019 and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login. Authentication is not required to exploit this vulnerability. Recent assessments:...
PT-2020-6582
Name of the Vulnerable Software and Affected Versions Ansible Engine versions 2.7.x through 2.9.x Description A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files. When a user executes "ansible-vault edit", another user on the same computer can read the old and...
CVE-2018-17572
InfluxDB 0.9.5 has Reflected XSS in the Write Data module...
DEBIAN-CVE-2018-17572
InfluxDB 0.9.5 has Reflected XSS in the Write Data module...
CVE-2018-17572
InfluxDB 0.9.5 has Reflected XSS in the Write Data module...
UBUNTU-CVE-2018-17572
InfluxDB 0.9.5 has Reflected XSS in the Write Data module...
Cross site scripting
InfluxDB 0.9.5 has Reflected XSS in the Write Data module...
CVE-2018-17572
InfluxDB 0.9.5 has Reflected XSS in the Write Data module...
CVE-2018-17572
CVE-2018-17572 affects InfluxDB 0.9.5 with a Reflected XSS in the Write Data module (and related admin panel exposure via Write Data). The connected sources corroborate XSS in the Write Data path rather than other components; no other versions or root-cause details are provided in these documents...
