Skip to content
OpenAdvisories

Archive

22 January 2020

Vulnerabilities first published on this day (UTC), newest first.

54 results · Feed

  • Unscored —

    The pkgmgr system service in Tizen allows an unprivileged process to perform package management actions, due to imprope…

  • Unscored —

    The Enlightenment system service in Tizen allows an unprivileged process to fully control or capture windows, due to im…

  • Critical 9.8

    ImpressPages CMS RCE

    ImpressPages CMS v1.0.12 has Unspecified Remote Code Execution (fixed in v1.0.13)

  • Unscored —

    An issue was discovered in Simple Machines Forum (SMF) before 2.0.16. Reverse tabnabbing can occur because of use of _b…

  • Medium 6.9

    downgrade of effective Strict Transport Security (STS) policy in postfix-mta-sts-resolver

    In postfix-mta-sts-resolver before 0.5.1, All users can receive incorrect response from daemon under rare conditions, rendering downgrade of effective STS policy.

  • Unscored —

    Lifesize Express ls ex2_4.7.10 2000 (14) devices allow XSS via the interface/interface.php brand parameter.

  • Unscored —

    An invalid memory access flaw is present in libyang before v1.0-r1 in the function resolve_feature_value() when an if-f…

  • Unscored —

    An invalid memory access flaw is present in libyang before v1.0-r3 in the function resolve_feature_value() when an if-f…

  • Unscored —

    A double-free is present in libyang before v1.0-r3 in the function yyparse() when a type statement in used in a notific…

  • Unscored —

    A double-free is present in libyang before v1.0-r1 in the function yyparse() when an empty description is used. Applica…

  • Unscored —

    A NULL pointer dereference is present in libyang before v1.0-r3 in the function lys_extension_instances_free() due to a…

  • Unscored —

    A segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern statement value during …

  • Unscored —

    A double-free is present in libyang before v1.0-r1 in the function yyparse() when an organization field is not terminat…

  • Unscored —

    A stack consumption issue is present in libyang before v1.0-r1 due to the self-referential union type containing leafre…