Skip to content
OpenAdvisories

Archive

3 October 2015

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium —

    Gollum Exposure of Sensitive Information

    The Precious module in gollum before 4.0.1 allows remote attackers to read arbitrary files by leveraging the lack of a certain temporary-file check.

  • Medium —

    baserCMS Access Control Bypass

    baserCMS before 3.0.8 allows remote authenticated users to modify arbitrary user settings via a crafted request.