Archive
29 May 2018
Vulnerabilities first published on this day (UTC), newest first.
80 results · Feed
-
High —
SQL Injection in waterline-sequel
waterline-sequel is a module that helps generate SQL statements for Waterline apps Any user input that goes into Waterline's `like`, `contains`, `startsWith`, or `endsWith` will end up in waterline-sequel with the potential for malicious code. A malicious use…
-
High 8.1
Downloads Resources over HTTP in strider-sauce
strider-sauce is Sauce Labs / Selenium support for Strider. strider-sauce downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested zip file with an …
-
High —
Downloads Resources over HTTP in geoip-lite-country
geoip-lite-country is a stripped down version of geoip-lite, supporting only country lookup. geoip-lite-country before 1.1.4 downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.
-
High —
Downloads Resources over HTTP in ntfserver
ntfserver is a Network Testing Framework Server. ntfserver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controll…
-
High —
Downloads Resources over HTTP in selenium-standalone-painful
selenium-standalone-painful installs a start-selenium command line to start a standalone selenium server with chrome-driver. selenium-standalone-painful downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to ca…
-
High —
Downloads Resources over HTTP in prince
Prince is a Node API for executing XML/HTML to PDF renderer PrinceXML via prince(1) CLI. prince downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the reque…
-
High —
Downloads Resources over HTTP in massif
massif is a Phantomjs fork massif downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on…
-
High —
Downloads Resources over HTTP in limbus-buildgen
limbus-buildgen is a "build anywhere" build system. limbus-buildgen versions below 0.1.1 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested res…
-
High —
Downloads Resources over HTTP in macaca-chromedriver
macaca-chromedriver is a Node.js wrapper for the selenium chromedriver. macaca-chromedriver before 1.0.29 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out…
-
High 8.1
ibapi downloads Resources over HTTP
ibapi is an Interactive Brokers API addon for NodeJS. ibapi downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. Before 2.5.6, it may be possible to cause remote code execution (RCE) by swapping out the requested binary with an at…
-
High 7.5
SQL Injection in sequelize
sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS In Postgres, SQLite, and Microsoft SQL Server there is an issue where arrays are treated as …
-
High 8.1
pngcrush-installer downloads Resources over HTTP
pngcrush-installer is an installer for Pngcrush. pngcrush-installer versions below 1.8.10 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested bi…
-
High 8.1
install-nw downloads Resources over HTTP
install-nw is a module which quickly and robustly installs and caches NW.js. install-nw versions below 1.1.5 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping o…
-
High —
Downloads Resources over HTTP in webdrvr
webdrvr is a npm wrapper for Selenium Webdriver including Chromedriver / IEDriver / IOSDriver / Ghostdriver. webdrvr downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by s…
-
High —
Downloads Resources over HTTP in baryton-saxophone
baryton-saxophone is a module to install and launch Selenium Server for Mac, Linux and Windows. baryton-saxophone versions below 3.0.1 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code exe…
-
High 7.5
Directory Traversal in gaoxuyan
gaoxuyan is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
-
High 8.1
windows-build-tools downloads Resources over HTTP
windows-build-tools is a module for installing C++ Build Tools for Windows using npm. windows-build-tools versions below 1.0.0 download resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by…
-
High 7.5
mysqljs is malware
mysqljs was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
node-tkinter is malware
node-tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
tkinter is malware
tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
Medium 6.1
Cross-Site Scripting in i18next
i18next is a language translation framework. When using the .init method, passing interpolation options without passing an escapeValue will default to undefined rather than the assumed true. This can result in a cross-site scripting vulnerability because user…
-
Unscored —
Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contains a command in…
-
Unscored —
Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contain a command inj…
-
Medium 6.5
IBM FlashSystem V840 and V900 products could allow an authenticated attacker with specialized access to overwrite arbit…
-
Unscored —
Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, under certain conditi…
-
Low 3.7
IBM Security Guardium Big Data Intelligence (SonarG) 3.1 stores sensitive information in URL parameters. This may lead …
-
Medium 4.2
IBM Security Guardium Big Data Intelligence (SonarG) 3.1 specifies permissions for a security-critical resource in a wa…
-
Medium 5.9
IBM Security Guardium Big Data Intelligence (SonarG) 3.1 does not renew a session variable after a successful authentic…
-
Medium 6.1
IBM Security Guardium Big Data Intelligence (SonarG) 3.1 is vulnerable to cross-site scripting. This vulnerability allo…
-
Unscored —
Symantec Advanced Secure Gateway (ASG) 6.6 and 6.7, and ProxySG 6.5, 6.6, and 6.7 are susceptible to a SAML authenticat…
-
Medium 6.4
sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo execu…
-
Medium 4.3
IBM Security Guardium Big Data Intelligence (SonarG) 3.1 generates an error message that includes sensitive information…
-
Unscored —CVE-2018-11532 Public exploit
An issue was discovered in the ChangUonDyU Advanced Statistics plugin 1.0.2 for MyBB. changstats.php has XSS, as demons…
-
Unscored —CVE-2018-11535 Public exploit
An issue was discovered in SITEMAKIN SLAC (Site Login and Access Control) v1.0. The parameter "my_item_search" in users…
-
Unscored —CVE-2018-11523 Public exploit
upload.php on NUUO NVRmini 2 devices allows Arbitrary File Upload, such as upload of .php files.
-
Unscored —
WUZHI CMS 4.1.0 has SQL Injection via an api/sms_check.php?param= URI.
-
Unscored —
An issue was discovered in CScms v4.1. A Cross-site request forgery (CSRF) vulnerability in plugins/sys/admin/Sys.php a…
-
Unscored —
md4c before 0.2.5 has a heap-based buffer overflow because md_split_simple_pairing_mark mishandles splits.
-
Unscored —
Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp.
-
Unscored —
A stack exhaustion vulnerability in the search function of dtSearch 7.90.8538.1 and prior allows remote attackers to ca…