Results
18,349· Page 270/367Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus. If
An issue was discovered in Deskpro before 2019.8.0. This product enables administrators to modify the helpdesk interface
An issue was discovered in Deskpro before 2019.8.0. The /api/tickets endpoint failed to properly validate a user's privi
An issue was discovered in Deskpro before 2019.8.0. The /api/apps/* endpoints failed to properly validate a user's privi
An issue was discovered in Deskpro before 2019.8.0. The /api/people endpoint failed to properly validate a user's privil
An issue was discovered in Deskpro before 2019.8.0. The /api/email_accounts endpoint failed to properly validate a user'
Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) 2.0.2 is vulnerable to Remote Command Execution v
In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia (PAS) ES System v1.6.1, a restricted desktop environment es
The connection initiation process in March Networks Command Client before 2.7.2 allows remote attackers to execute arbit
The Kubernetes API Server component in versions 1.1-1.14, and versions prior to 1.15.10, 1.16.7 and 1.17.3 allows an aut
In RedpwnCTF before version 2.3, there is a session fixation vulnerability in exploitable through the `#token=$ssid` has
In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP serve
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A rem
Scripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when generating navigational elem
Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07.
Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution.
Sonatype Nexus Repository before 3.21.2 allows XSS.
Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).
Multiple memory corruption issues were addressed with improved state management. This issue is fixed in iOS 13.4 and iPa
A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1. A malicious iframe may use a
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.4 and iPadOS 13.4, t
The issue was addressed by clearing website permission prompts after navigation. This issue is fixed in iOS 13.4 and iPa
The issue was resolved by clearing application previews when content is deleted. This issue is fixed in iOS 13.4 and iPa
An issue existed in the selection of video file by Mail. The issue was fixed by selecting the latest version of a video.
This issue was addressed with a new entitlement. This issue is fixed in macOS Catalina 10.15.4. A malicious application
An issue existed in the handling of tabs displaying picture in picture video. The issue was corrected with improved stat
The issue was addressed with improved handling of icon caches. This issue is fixed in iOS 14.0 and iPadOS 14.0. A malici
A logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4. An attacker
Multiple issues were addressed by updating to version 8.1.1850. This issue is fixed in macOS Catalina 10.15.4. Multiple
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.4 and iPadOS 13.4, t
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13
This issue was addressed with a new entitlement. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2
An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, wat
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13
A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in iOS 13
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A loc
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Ca
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Ca
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Ca
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A loc
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A loc
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15.4. A maliciously cra
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A
Multiple memory corruption issues were addressed with improved state management. This issue is fixed in macOS Catalina 1
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.4. An
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.4 and iPadOS 13.4,
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvO
Test your stack for 2020issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.