Software AG Continues Efforts Against $20M Ransomware Attack

Enterprise VulnerabilitiesFrom DHS/US-CERT's National Vulnerability Database CVE-2020-26546PUBLISHED: 2020-10-12

** UNSUPPORTED WHEN ASSIGNED ** An issue was discovered in HelpDeskZ 1.0.2. The feature to auto-login a user, via the RememberMe functionality, is prone to SQL injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

CVE-2020-15250PUBLISHED: 2020-10-12

In JUnit4 before version 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this directory they ar...

CVE-2020-13903PUBLISHED: 2020-10-12

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-12254. Reason: This candidate is a reservation duplicate of CVE-2020-12254. Notes: All CVE users should reference CVE-2020-12254 instead of this candidate. All references and descriptions in this candidate have been removed to preve...

CVE-2020-25825PUBLISHED: 2020-10-12

In Octopus Deploy 3.1.0 to 2020.4.0, certain scripts can reveal sensitive information to the user in the task logs.

CVE-2020-12670PUBLISHED: 2020-10-12

XSS exists in Webmin 1.941 and earlier affecting the Save function of the Read User Email Module / mailboxes Endpoint when attempting to save HTML emails. This module parses any output without sanitizing SCRIPT elements, as opposed to ..

Support the originator by clicking the read the rest link below.