CWE-706 Archives - CVE Vulnerability

CVE-2018-6112

Sun, 26 Feb 2023 06:50:35 +0000

Making URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

The post CVE-2018-6112 appeared first on CVE Vulnerability.

CVE-2018-12020

Sun, 26 Feb 2023 06:45:29 +0000

mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the “–status-fd 2” option. For example, the OpenPGP data might represent an original filename that contains line feed characters in conjunction with GOODSIG or VALIDSIG status codes.

The post CVE-2018-12020 appeared first on CVE Vulnerability.

CVE-2018-0237

Sun, 26 Feb 2023 06:44:06 +0000

A vulnerability in the file type detection mechanism of the Cisco Advanced Malware Protection (AMP) for Endpoints macOS Connector could allow an unauthenticated, remote attacker to bypass malware detection. The vulnerability occurs because the software relies on only the file extension for detecting DMG files. An attacker could exploit this vulnerability by sending a DMG file with a nonstandard extension to a device that is running an affected AMP for Endpoints macOS Connector. An exploit could allow the attacker to bypass configured malware detection. Cisco Bug IDs: CSCve34034.

The post CVE-2018-0237 appeared first on CVE Vulnerability.

CVE-2020-4719

Sun, 26 Feb 2023 06:42:06 +0000

The IBM Cloud APM 8.1.4 server will issue a DNS request to resolve any hostname specified in the Cloud Event Management Webhook URL configuration definition. This could enable an authenticated user with admin authorization to create DNS query strings that are not hostnames. IBM X-Force ID: 187861.

The post CVE-2020-4719 appeared first on CVE Vulnerability.

CVE-2020-35894

Sun, 26 Feb 2023 06:41:28 +0000

An issue was discovered in the obstack crate before 0.1.4 for Rust. Unaligned references can occur.

The post CVE-2020-35894 appeared first on CVE Vulnerability.

CVE-2020-35623

Sun, 26 Feb 2023 06:41:21 +0000

An issue was discovered in the CasAuth extension for MediaWiki through 1.35.1. Due to improper username validation, it allowed user impersonation with trivial manipulations of certain characters within a given username. An ordinary user may be able to login as a “bureaucrat user” who has a similar username, as demonstrated by usernames that differ only in (1) bidirectional override symbols or (2) blank space.

The post CVE-2020-35623 appeared first on CVE Vulnerability.

CVE-2020-35566

Sun, 26 Feb 2023 06:41:19 +0000

An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. An attacker can read arbitrary JSON files via Local File Inclusion.

The post CVE-2020-35566 appeared first on CVE Vulnerability.

CVE-2020-26233

Sun, 26 Feb 2023 06:39:58 +0000

Git Credential Manager Core (GCM Core) is a secure Git credential helper built on .NET Core that runs on Windows and macOS. In Git Credential Manager Core before version 2.0.289, when recursively cloning a Git repository on Windows with submodules, Git will first clone the top-level repository and then recursively clone all submodules by starting new Git processes from the top-level working directory. If a malicious git.exe executable is present in the top-level repository then this binary will be started by Git Credential Manager Core when attempting to read configuration, and not git.exe as found on the %PATH%. This only affects GCM Core on Windows, not macOS or Linux-based distributions. GCM Core version 2.0.289 contains the fix for this vulnerability, and is available from the project’s GitHub releases page. GCM Core 2.0.289 is also bundled in the latest Git for Windows release; version 2.29.2(3). As a workaround, users should avoid recursively cloning untrusted repositories with the –recurse-submodules option.

The post CVE-2020-26233 appeared first on CVE Vulnerability.

CVE-2020-23448

Sun, 26 Feb 2023 06:39:16 +0000

newbee-mall all versions are affected by incorrect access control to remotely gain privileges through AdminLoginInterceptor.java. The authentication logic of the system’s background /admin is in code AdminLoginInterceptor, which can be bypassed.

The post CVE-2020-23448 appeared first on CVE Vulnerability.

CVE-2020-15505

Sun, 26 Feb 2023 06:37:51 +0000

A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2 and earlier, and 9.8.0; and Monitor and Reporting Database (RDB) version 2.0.0.1 and earlier that allows remote attackers to execute arbitrary code via unspecified vectors.

The post CVE-2020-15505 appeared first on CVE Vulnerability.