Skip to content
OpenAdvisories

Archive

9 January 2020

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Medium 5.4

    A cross-site scripting (XSS) vulnerability in Option/optionsAll.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KD…

  • Medium 5.4

    A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.15, allows authenticated users with ba…

  • Medium 5.4

    IBM Jazz Reporting Service (JRS) 6.0.6.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted…

  • Medium 6.1

    An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kerne…

  • Medium 6.5

    Session fixation attack in Pow (Hex package)

    In Pow (Hex package) before 1.0.16, the use of Plug.Session in Pow.Plug.Session is susceptible to session fixation attacks if a persistent session store is used for Plug.Session, such as Redis or a database. Cookie store, which is used in most Phoenix apps, d…