Archive
28 April 2019
Vulnerabilities first published on this day (UTC), newest first.
4 results · Feed
-
Unscored —
dhcp.c in dhcpcd before 7.2.1 contains a 1-byte read overflow with DHO_OPTSOVERLOADED.
-
Unscored —
auth.c in dhcpcd before 7.2.1 allowed attackers to infer secrets by performing latency attacks.
-
Unscored —CVE-2019-11577 EPSS 53%
dhcpcd before 7.2.1 contains a buffer overflow in dhcp6_findna in dhcp6.c when reading NA/TA addresses.
-
Critical 9.8
Gitea Allows 1FA Even for 2FA-Enrolled Accounts
Gitea before 1.8.0 allows 1FA for user accounts that have completed 2FA enrollment. If a user's credentials are known, then an attacker could send them to the API without requiring the 2FA one-time password.