PT-2020-15471 · Jenkins · Jenkins Jsgames Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins JSGames Plugin version 0.2 and earlier Description: The issue allows part of a URL to be evaluated as code, resulting in a reflected cross-site scripting XSS vulnerability. Recommendations: For Jenkins JSGames Plugin version 0.2 and...

Huawei FusionCompute Information Disclosure Vulnerability (CNVD-2020-46464)

Huawei FusionCompute is a computer virtualization engine from Huawei China. The product provides Virtual Resource Manager VRM and Compute Node Agent CNA, among others. An information disclosure vulnerability exists in Huawei FusionCompute version 8.0.0, which originates from the program failing t...

Unspecified vulnerability in jupyterhub-kubespawner

jupyterhub-kubespawner is a package for spawning single-user laptop servers on Kubernetes clusters. A security vulnerability in versions of jupyterhub-kubespawner prior to 0.12 can be exploited by an attacker to access the default server of another user with the same username...

GNU LibreDWG Null Pointer Dereference Vulnerability

GNU LibreDWG is a GNU Project C library for working with DWG files. A resource management error vulnerability exists in GNU LibreDWG versions prior to 0.11. The vulnerability stems from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked system or product. An...

Bitcoin wxBitcoin/bitcoind Buffer Overflow Vulnerability

A vulnerability exists in Bitcoin wxBitcoin and bitcoind versions prior to 0.3.13, which stems from bitcoins that do not properly process the associated bitcoin transaction with a zero-point confirmation. A remote attacker could exploit the vulnerability to cause a denial of service a large numbe...

The vulnerability of the Videolabs libmicrodns 0.1.0 message parser allows a malicious actor to cause a service failure by exploiting a resource consumption issue in the VideoLAN VLC media player.

The vulnerability of the Videolabs libmicrodns 0.1.0 message parser, when used with the VideoLAN VLC media player, is related to an uncontrolled resource consumption during the analysis of mDNS messages. Exploiting this vulnerability could allow a malicious actor to cause service failures remotel...

libseccomp-golang: mishandling of multiple argument rules leading to a bypass of intended access restrictions

libseccomp-golang 0.9.0 and earlier incorrectly generates BPFs that OR multiple arguments rather than ANDing them. A process running under a restrictive seccomp filter that specified multiple syscall arguments could bypass intended access restrictions by specifying a single matching argument...

Unspecified Vulnerability in LibVNCServer (CNVD-2020-36785)

LibVNCServer is a cross-platform C library that supports the implementation of VNC Virtual Network Computing server or client functionality in programs. A security vulnerability exists in LibVNCServer versions prior to 0.9.13. The vulnerability can be exploited by an attacker to access byte-align...

Logic Flaw Vulnerability in Particl Resource Management

Particl is a trading system that uses cryptocurrencies. A security vulnerability exists in particl 0.17 and earlier versions. An attacker could exploit the vulnerability to cause a denial of service...

ALPINE-CVE-2020-12268

jbig2imagecompose in jbig2image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow...

GPAC Invalid Pointer Dereference Vulnerability (CNVD-2020-19877)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. An invalid pointer dereference vulnerability exists in gflistcount in utils/list.c in libgpac.a in versions of GPAC prior to 0.8.0. An attacker can exploit this vulnerability to cause a denial of service via a...

thrift: Endless loop when feed with specific input data

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...

Netkit telnet buffer overflow vulnerability

Netkit telnet is a telnet client program for use in the Linux platform. The program is mainly used to interact and communicate with another host using the TELNET protocol. A buffer overflow vulnerability exists in the utility.c file of telnetd in netkit telnet 0.17 and earlier versions. A remote...

CVE-2020-1787

HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139C00E133R3P1 have an improper authentication vulnerability. The system has a logic error under certain scenario, successful exploit could allow the attacker who gains the privilege of guest user to access to the host user's desktop in an...

PYSEC-2019-181

Python keyring lib before 0.10 created keyring files with world-readable permissions...

OPENSUSE-SU-2019:2319-1 Security update for libopenmpt

This update for libopenmpt to version 0.3.19 fixes the following issues: - CVE-2019-17113: Fixed a buffer overflow in ModPlugInstrumentName and ModPlugSampleName bsc1153102. This update was imported from the SUSE:SLE-15:Update update project...

Jiangnan Online Judge Cross-Site Scripting Vulnerability (CNVD-2019-36852)

Jiangnan Online Judge is an online evaluation system for computer programming. The system is mainly used for compiling and executing the source code submitted by users and checking the correctness of the program source code. A cross-site scripting vulnerability exists in Jiangnan Online Judge...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26666)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A component access control error vulnerability exists in the Server: Replication subcomponent of the MySQL Server component in Oracle MySQL, version...

Oracle GraalVM Access Control Error Vulnerability

Oracle GraalVM is the United States Oracle Oracle company's set of instant compiler written in the Java language. The product supports a variety of programming languages and execution modes.GraalVM Enterprise Edition is the enterprise version of GraalVM. A security vulnerability exists in the Jav...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26529)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Optimizer subcomponent of the MySQL Server component in Oracle MySQL, version 8.0.16 and earlier. An...