Archive
8 January 2020
Vulnerabilities first published on this day (UTC), newest first.
103 results · Feed
-
High 8.8
Pivotal Ops Manager logs query parameters in tomcat access file
Pivotal Ops Manager, versions 2.4.x prior to 2.4.27, 2.5.x prior to 2.5.24, 2.6.x prior to 2.6.16, and 2.7.x prior to 2.7.5, logs all query parameters to tomcat’s access file. If the query parameters are used to provide authentication, ie. credentials, then t…
-
Unscored —
stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int.
-
Unscored —
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table.
-
Unscored —
stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek.
-
Unscored —
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8.
-
Unscored —
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT.
-
Unscored —
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8.
-
Unscored —
stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index.
-
Unscored —
Imperva SecureSphere Web Application Firewall (WAF) before 12-august-2010 allows SQL injection filter bypass.
-
Unscored —
Snare for Linux before 1.7.0 has CSRF in the web interface.
-
Unscored —
Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword.
-
Unscored —
Koala Framework before 2011-11-21 has XSS via the request_uri parameter.
-
Unscored —
A Content-Security-Policy that blocks in-line scripts could be bypassed using an object tag to execute JavaScript in th…
-
Unscored —
Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 71. Some of these bugs showed evidence of memory corr…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some of these bugs showed ev…
-
Unscored —
After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invali…
-
Unscored —
When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and…
-
Unscored —
During the initialization of a new content process, a race condition occurs that can allow a content process to disclos…
-
Unscored —
If an XML file is served with a Content Security Policy and the XML file includes an XSL stylesheet, the Content Securi…
-
Unscored —
When Python was installed on Windows, a python file being served with the MIME type of text/plain could be executed by …
-
Unscored —
When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve the accuracy o…
-
Unscored —
Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash. We presu…
-
Unscored —
When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @…
-
Unscored —
During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption an…
-
Unscored —
If an image had not loaded correctly (such as when it is not actually an image), it could be dragged and dropped cross-…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 70. Some of these bugs showed evidence of memory corr…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some of these bugs showed ev…
-
Unscored —
Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could c…
-
Unscored —
Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race c…
-
Unscored —
When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an unpri…
-
Unscored —
When using nested workers, a use-after-free could occur during worker destruction. This resulted in a potentially explo…
-
Unscored —
The plain text serializer used a fixed-size array for the number of <ol> elements it could process; however it was poss…
-
Unscored —
If upgrade-insecure-requests was specified in the Content Security Policy, and a link was dragged and dropped from that…
-
Unscored —
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c.
-
Unscored —
GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in read_sections_map in decode_r2007.c.
-
Unscored —
GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in get_next_owned_entity in dwg.c.
-
Unscored —
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in decode_r2007.c.
-
Unscored —
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c.
-
Unscored —
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c.