Notre sélection d'alertes et avis SSI.
Sources : US Cert, Cert EU, Cert FR, Cnil, VulDB.

SAINT Security Suite up to 9.8.20 Permission cross site scripting

A vulnerability has been found in SAINT Security Suite up to 9.8.20 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Permission. There is no information about possible countermeasures...
Auteur: VulDB

SAINT Security Suite up to 9.8.20 Analytics sql injection

A vulnerability, which was classified as critical, was found in SAINT Security Suite up to 9.8.20. Affected is an unknown function of the component Analytics. There is no information about possible countermeasures known. It may be suggested to...
Auteur: VulDB

SAINT Security Suite up to 9.8.20 sql injection [CVE-2020-16276]

A vulnerability, which was classified as critical, has been found in SAINT Security Suite up to 9.8.20. This issue affects some unknown processing. There is no information about possible countermeasures known. It may be suggested to replace the...
Auteur: VulDB

SAINT Security Suite up to 9.8.20 Credential Manager cross site scripting

A vulnerability classified as problematic was found in SAINT Security Suite up to 9.8.20. This vulnerability affects an unknown code block of the component Credential Manager. There is no information about possible countermeasures known. It may...
Auteur: VulDB

Mozilla Firefox up to 27 on iOS Download privilege escalation

A vulnerability classified as critical has been found in Mozilla Firefox up to 27 on iOS (Web Browser). This affects an unknown code of the component Download Handler. Upgrading eliminates this vulnerability.
Auteur: VulDB

Mozilla Firefox up to 27 on iOS Login Autofill Password information disclosure

A vulnerability was found in Mozilla Firefox up to 27 on iOS (Web Browser). It has been rated as problematic. Affected by this issue is an unknown part of the component Login Autofill. Upgrading to version 28 eliminates this vulnerability.
Auteur: VulDB

Mozilla Firefox/Firefox ESR/Thunderbird memory corruption [CVE-2020-15659]

A vulnerability was found in Mozilla Firefox, Firefox ESR and Thunderbird (Web Browser) (affected version unknown). It has been declared as critical. Affected by this vulnerability is some unknown functionality. Upgrading eliminates this...
Auteur: VulDB

Mozilla Firefox/Firefox ESR/Thunderbird Download Special Char spoofing

A vulnerability was found in Mozilla Firefox, Firefox ESR and Thunderbird (Web Browser) (version unknown). It has been classified as critical. Affected is an unknown functionality of the component Download. Upgrading eliminates this vulnerability.
Auteur: VulDB

Mozilla Firefox/Firefox ESR/Thunderbird on Windows DLL privilege escalation

A vulnerability was found in Mozilla Firefox, Firefox ESR and Thunderbird on Windows (Web Browser) (unknown version) and classified as critical. This issue affects an unknown function of the component DLL Handler. Upgrading eliminates this...
Auteur: VulDB

Mozilla Firefox/Firefox ESR/Thunderbird JIT Optimizer Argument unknown vulnerability

A vulnerability has been found in Mozilla Firefox, Firefox ESR and Thunderbird (Web Browser) (the affected version is unknown) and classified as problematic. This vulnerability affects some unknown processing of the component JIT Optimizer....
Auteur: VulDB

Mozilla Firefox/Firefox ESR/Thunderbird Redirect HTTP Request CORS privilege escalation

A vulnerability, which was classified as critical, was found in Mozilla Firefox, Firefox ESR and Thunderbird (Web Browser) (the affected version unknown). This affects an unknown code block of the component Redirect Handler. Upgrading eliminates...
Auteur: VulDB

Mozilla Firefox/Firefox ESR/Thunderbird CSS Loop denial of service

A vulnerability, which was classified as problematic, has been found in Mozilla Firefox, Firefox ESR and Thunderbird (Web Browser) (affected version not known). Affected by this issue is an unknown code of the component CSS Handler. Upgrading...
Auteur: VulDB

Mozilla Firefox/Firefox ESR/Thunderbird iFrame Sandbox Config privilege escalation

A vulnerability classified as critical was found in Mozilla Firefox, Firefox ESR and Thunderbird (Web Browser) (affected version unknown). Affected by this vulnerability is an unknown part of the component iFrame Sandbox Handler. Upgrading...
Auteur: VulDB

Mozilla Firefox/Firefox ESR/Thunderbird Javascript Error Cross-Origin information disclosure

A vulnerability classified as problematic has been found in Mozilla Firefox, Firefox ESR and Thunderbird (Web Browser) (version unknown). Affected is some unknown functionality of the component Javascript Error Handler. Upgrading eliminates this...
Auteur: VulDB

Mozilla Firefox ESR up to 68.10 File Picker privilege escalation

A vulnerability was found in Mozilla Firefox ESR up to 68.10 (Web Browser). It has been declared as critical. This vulnerability affects an unknown function of the component File Picker Handler. Upgrading to version 68.11 eliminates this...
Auteur: VulDB

Mozilla Firefox ESR up to 68.10 on Android File Picker privilege escalation

A vulnerability was found in Mozilla Firefox ESR up to 68.10 on Android (Web Browser). It has been classified as critical. This affects some unknown processing of the component File Picker Handler. Upgrading to version 68.11 eliminates this...
Auteur: VulDB

Mozilla Firefox up to 27 on iOS Unicode RTL Order File Name spoofing

A vulnerability was found in Mozilla Firefox up to 27 on iOS (Web Browser). It has been rated as critical. This issue affects an unknown functionality of the component Unicode RTL Order Handler. Upgrading to version 28 eliminates this...
Auteur: VulDB

Mozilla Firefox/Thunderbird X-Frame-Options Header privilege escalation

A vulnerability was found in Mozilla Firefox and Thunderbird (Web Browser) (affected version not known) and classified as critical. Affected by this issue is an unknown code block of the component X-Frame-Options Header Handler. Upgrading...
Auteur: VulDB

Mozilla Firefox on Android Content Provider information disclosure

A vulnerability has been found in Mozilla Firefox on Android (Web Browser) (affected version unknown) and classified as problematic. Affected by this vulnerability is an unknown code of the component Content Provider. Upgrading eliminates this...
Auteur: VulDB

MyBB up to 1.8.23 MyCode Visual Editor POST Parameter DOM-Based cross site scripting

A vulnerability, which was classified as problematic, was found in MyBB up to 1.8.23 (Content Management System). Affected is an unknown part of the component MyCode Visual Editor. Upgrading to version 1.8.24 eliminates this vulnerability.
Auteur: VulDB

Shenzhen Hichip Vision Technology V20 privilege escalation [CVE-2020-9529]

A vulnerability, which was classified as critical, has been found in Shenzhen Hichip Vision Technology V6, V7, V8, V9, V10, V11, V12, V13, V14, V15, V16, V17, V18, V19 and V20. This issue affects some unknown functionality. There is no...
Auteur: VulDB

Shenzhen Hichip Vision Technology V20 weak authentication [CVE-2020-9528]

A vulnerability classified as critical was found in Shenzhen Hichip Vision Technology V6, V7, V8, V9, V10, V11, V12, V13, V14, V15, V16, V17, V18, V19 and V20. This vulnerability affects an unknown functionality. There is no information about...
Auteur: VulDB

Shenzhen Hichip Vision Technology V20 up to 2020 P2P Service memory corruption

A vulnerability classified as critical has been found in Shenzhen Hichip Vision Technology V6, V7, V8, V9, V10, V11, V12, V13, V14, V15, V16, V17, V18, V19 and V20 up to 2020. This affects an unknown function of the component P2P Service. There...
Auteur: VulDB

CS2 Network P2P up to 3.x information disclosure [CVE-2020-9526]

A vulnerability was found in CS2 Network P2P up to 3.x (Peer-to-Peer Software). It has been rated as problematic. Affected by this issue is some unknown processing. There is no information about possible countermeasures known. It may be suggested...
Auteur: VulDB

CS2 Network P2P up to 3.x Man-in-the-Middle weak authentication

A vulnerability was found in CS2 Network P2P up to 3.x (Peer-to-Peer Software). It has been declared as problematic. Affected by this vulnerability is an unknown code block. There is no information about possible countermeasures known. It may be...
Auteur: VulDB
First567891011121314Last

Événements SSI