Archive
8 January 2020
Vulnerabilities first published on this day (UTC), newest first.
103 results · Feed
-
Unscored —
GNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwg_dynapi_entity_value in dynapi.c (dynapi.c is generate…
-
Unscored —
An object tag with a data URI did not correctly inherit the document's Content Security Policy. This allowed a CSP bypa…
-
Unscored —
A compromised content process could send a message to the parent process that would cause the 'Click to Play' permissio…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 69 and Firefox ESR 68.1. Some o…
-
Unscored —
Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these enti…
-
Unscored —
If two same-origin documents set document.domain differently to become cross-origin, it was possible for them to call a…
-
Unscored —
By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned i…
-
Unscored —
A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted in a potentially exploi…
-
Unscored —
An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack. This c…
-
Unscored —
Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360 Total Security was install…
-
Unscored —
When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequen…
-
Unscored —
Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited to a denial o…
-
Unscored —
When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a s…
-
Unscored —
BigProf Online Invoicing System (OIS) through 2.6 has XSS that can be leveraged for session hijacking. An attacker can …
-
Unscored —
An Information Disclosure vulnerability exists in the Google Pixel/Pixel SL Qualcomm Avtimer Driver due to a NULL point…
-
Unscored —
In LowEnergyClient::MtuChangedCallback of low_energy_client.cc, there is a possible out of bounds read due to a race co…
-
Unscored —
In flattenString8 of Sensor.cpp, there is a possible information disclosure of heap memory due to uninitialized data. T…
-
Unscored —
In rw_i93_send_cmd_write_single_block of rw_i93.cc, there is a possible information disclosure of heap memory due to un…
-
Unscored —
In generateCrop of WallpaperManagerService.java, there is a possible sysui crash due to image exceeding maximum texture…
-
Unscored —
In onCreate of InstallStart.java, there is a possible package validation bypass due to a time-of-check time-of-use vuln…
-
Unscored —
In ih264d_init_decoder of ih264d_api.c, there is a possible out of bounds write due to a use after free. This could lea…
-
Unscored —CVE-2020-0001 Public exploit
In getProcessRecordLocked of ActivityManagerService.java isolated apps are not handled correctly. This could lead to lo…
-
Unscored —
A Denial of Service vulnerability exists in Symantec Norton Mobile Security for Android prior to 3.16, which could let …
-
Unscored —
PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the adminis…
-
Unscored —
PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file.
-
Unscored —
FTPGetter Professional 5.97.0.223 is vulnerable to a memory corruption bug when a user sends a specially crafted string…
-
Unscored —
The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker t…
-
Unscored —
An Information Disclosure vulnerability exists in the mid.dat file stored on the SD card in Symantec Norton Mobile Secu…
-
Unscored —
A security bypass vulnerability exists in Symantec Norton Mobile Security for Android before 3.16, which could let a ma…
-
Unscored —
nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (…
-
Unscored —CVE-2014-5287 Public exploit
A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input …
-
Unscored —
An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via alias to Manage Store Contents.
-
Unscored —
An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via cacheName to SystemCacheDetails.jsp.
-
Unscored —
An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via search to the Users/Group search page.
-
Medium —
XSS in Ignite Realtime Openfire via isTrustStore
An XSS issue was discovered in Ignite Realtime Openfire 4.4.4 via isTrustStore to Manage Store Contents.
-
Unscored —
An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check functionality of WAGO PFC200…
-
Critical 9.8
OS command injection in aws-lambda
In aws-lambda versions prior to version 1.0.5, the "config.FunctioName" is used to construct the argument used within the "exec" function without any sanitization. It is possible for a user to inject arbitrary commands to the "zipCmd" used within "config.Func…
-
Unscored —
A Cross-Site Scripting (XSS) vulnerability exists in the ITMS workflow process manager console in Symantec IT Managemen…
-
Unscored —
CA Automic Dollar Universe 5.3.3 contains a vulnerability, related to the uxdqmsrv binary being setuid root, that allow…
-
Unscored —
CA Automic Sysload 5.6.0 through 6.1.2 contains a vulnerability, related to a lack of authentication on the File Server…