An issue has been discovered in GitLab affecting all versions starting from 10.8. Reflected XSS on Multiple Routes

Published at: October 06, 2020 at 03:15PM
View on website

IBM Security Access Manager Appliance 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172131.

Published at: October 06, 2020 at 12:15PM
View on website

REDDOXX MailDepot 2032 2.2.1242 allows authenticated users to access the mailboxes of other users.

Published at: October 06, 2020 at 11:15AM
View on website

manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree’s root, which might allow attackers to access a dangling pointer in an application whose developer was unaware of a documentation update from 1999.

Published at: October 06, 2020 at 09:15AM
View on website

Improper initialization in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow a privileged user to potentially enable denial of service via local access.

Published at: October 05, 2020 at 10:15AM
View on website