Archive
20 December 2019
Vulnerabilities first published on this day (UTC), newest first.
36 results · Feed
-
High 7.1
HTTP Request Smuggling: LF vs CRLF handling in Waitress
Waitress through version 1.3.1 implemented a "MAY" part of the RFC7230 which states: "Although the line terminator for the start-line and header fields is the sequence CRLF, a recipient MAY recognize a single LF as a line terminator and ignore any preceding C…
-
High 7.1
HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress
Waitress through version 1.3.1 would parse the Transfer-Encoding header and only look for a single string value, if that value was not chunked it would fall through and use the Content-Length header instead. According to the HTTP standard Transfer-Encoding sh…
-
Critical 9.8CVE-2019-19919 Public exploit
Prototype Pollution in handlebars
Versions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object's __proto__ and __defineGetter__ properties, which may allow an attacker to execute arbitrary code through crafted payl…
-
High 7.3CVE-2019-19231 Public exploit
An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that …
-
Unscored —
A denial of service exists in gitlab <v12.3.2, <v12.2.6, and <v12.1.10 that would let an attacker bypass input validati…
-
Unscored —
Lout 3.40 has a buffer overflow in the StringQuotedWord() function in z39.c.
-
Unscored —
Lout 3.40 has a heap-based buffer overflow in the srcnext() function in z02.c.
-
Unscored —
NeuVector 3.1 when configured to allow authentication via Active Directory, does not enforce non-empty passwords which …
-
Medium 6.1
IBM Financial Transaction Manager 3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed a…
-
Medium 4.3
IBM Financial Transaction Manager 3.0 does not set the secure attribute on authorization tokens or session cookies. Att…
-
Medium 6.1
IBM Financial Transaction Manager 3.0 could allow a remote attacker to hijack the clicking action of the victim. By per…
-
Medium 4.3
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute…
-
Medium 4.3
IBM Financial Transaction Manager 3.0 is vulnerable to cross-site request forgery which could allow an attacker to exec…
-
Medium 5.4
IBM Cognos Analytics 11.0 and 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbi…
-
Medium 4.3
IBM Cognos Business Intelligence 10.2.2 is vulnerable to cross-site request forgery which could allow an attacker to ex…
-
Unscored —
An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Attackers can use the …
-
Unscored —
An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Because of insecure ke…
-
Unscored —
An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attacker…
-
Unscored —
An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Because …
-
Unscored —
An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attacker…
-
Unscored —
An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, RTCGQ01LM devices. Attackers can utilize the "discove…
-
Critical 9.8
Deserialization of Untrusted Data in Log4j
Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log dat…
-
Unscored —
An issue was found in Philips Veradius Unity, Pulsera, and Endura Dual WAN Router, Veradius Unity (718132) with wireles…
-
Critical 10.0
PAN-OS on PA-7000 Series: Improper restriction of communication to Log Forwarding Card (LFC) allows root access
Improper restriction of communications to Log Forwarding Card (LFC) on PA-7000 Series devices with second-generation Switch Management Card (SMC) may allow an attacker with network access to the LFC to gain root access to PAN-OS. This issue affects PAN-OS 9.0…
-
Unscored —
In Midori Browser 0.5.11 (on Windows 10), Content Security Policy (CSP) is not applied correctly to all parts of multip…
-
Unscored —
gnome-keyring does not discard stored secrets when using gnome_keyring_lock_all_sync function
-
Unscored —
cups (Common Unix Printing System) 'Listen localhost:631' option not honored correctly which could provide unauthorized…
-
Unscored —
LibreOffice and OpenOffice automatically open embedded content
-
Unscored —
ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege…
-
Unscored —
-
Medium 6.1CVE-2016-1000229 Public exploit
Improper Neutralization of Input During Web Page Generation in swagger-ui
swagger-ui has XSS in key names
-
Unscored —
phpMyChat-Plus 1.98 is vulnerable to reflected XSS via JavaScript injection into the password reset URL. In the URL, th…
-
Unscored —
3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4.7.54, and CODESYS PLC…
-
Unscored —
The Trend Micro Security 2020 consumer family of products contains a vulnerability that could allow a local attacker to…
-
Unscored —
Trend Micro Apex One (2019) is affected by a cross-site scripting (XSS) vulnerability on the product console. Note that…
-
Unscored —
A vulnerability in Trend Micro Apex One and OfficeScan XG could allow an attacker to expose a masked credential key by …