Skip to content
OpenAdvisories

Archive

15 November 2019

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 5.7

    Validator parsing discrepancy due to string encoding in NPM slpjs

    A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the slpjs npm package. An attacker could create a specially crafted Bitcoin script in order to cause a hard-fork from the SLP con…

  • Medium 5.7

    Validator parsing discrepancy due to string encoding in NPM slp-validate 1.0.0

    A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the slp-validate@1.0.0 npm package. An attacker could create a specially crafted Bitcoin script in order to cause a hard-fork fro…

  • Medium 6.1

    Pimcore Cross-site Scripting (XSS) vulnerability

    bundles/AdminBundle/Controller/Admin/EmailController.php in Pimcore before 6.3.0 allows script execution in the Email Log preview window because of the lack of a Content-Security-Policy header.