Archive
30 January 2020
Vulnerabilities first published on this day (UTC), newest first.
56 results · Feed
-
High 8.7
Ethereum Name Service - Malicious takeover of previously owned ENS names
A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owners consent or awareness. A new ENS deployment is being rolled out that fixes this vulnerability in the ENS re…
-
Unscored —
XSS exists in the shortcode functionality of the GistPress plugin before 3.0.2 for WordPress via the includes/class-gis…
-
Medium 5.3
XML external entity (XXE) processing ('external-parameter-entities' feature was not fully disabled))
All versions of com.puppycrawl.tools:checkstyle before 8.29 are vulnerable to XML External Entity (XXE) Injection due to an incomplete fix for CVE-2019-9658.
-
High 8.7
Authentication Bypass For Endpoints With Anonymous Access in OpenCast
In Opencast before 7.6 and 8.1, using a remember-me cookie with an arbitrary username can cause Opencast to assume proper authentication for that user even if the remember-me cookie was incorrect given that the attacked endpoint also allows anonymous access. …
-
Medium 6.9CVE-2020-8493 Public exploit
A stored XSS vulnerability in Kronos Web Time and Attendance (webTA) affects 3.8.x and later 3.x versions before 4.0 vi…
-
High 7.5
In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H402editUser s…
-
High 7.5CVE-2020-8495 Public exploit
In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H491delegate s…
-
Medium 6.9
In Kronos Web Time and Attendance (webTA) 4.1.x and later 4.x versions before 5.0, there is a Stored XSS vulnerability …
-
Medium 4.8
Opencast users with ROLE_COURSE_ADMIN can create new users
In Opencast before 7.6 and 8.1, users with the role ROLE_COURSE_ADMIN can use the user-utils endpoint to create new users not including the role ROLE_ADMIN. ROLE_COURSE_ADMIN is a non-standard role in Opencast which is referenced neither in the documentation …
-
Unscored —
Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker t…
-
Medium 4.9
Bitdefender Total Security Link Resolution Denial-of-Service Vulnerability
A vulnerability in the improper handling of junctions before deletion in Bitdefender Total Security 2020 can allow an attacker to to trigger a denial of service on the affected device.
-
High 7.7
Opencast uses unsafe identifiers
Opencast before 8.1 and 7.6 allows almost arbitrary identifiers for media packages and elements to be used. This can be problematic for operation and security since such identifiers are sometimes used for file system operations which may lead to an attacker b…
-
Medium 6.8
Hard-Coded Key Used For Remember-me Token in OpenCast
Opencast before 7.6 and 8.1 enables a remember-me cookie based on a hash created from the username, password, and an additional system key. This means that an attacker getting access to a remember-me token for one server can get access to all servers which al…
-
Unscored —
The System Management Mode (SMM) implementation in Dell Latitude E6430 BIOS Revision A09, HP EliteBook 850 G1 BIOS revi…
-
High 7.5
Insecure Entropy Source - Math.random() in node-uuid
node-uuid before 1.4.4 uses insufficiently random data to create a GUID, which could make it easier for attackers to have unspecified impact via brute force guessing.
-
Unscored —
The Flippy module 7.x-1.x before 7.x-1.2 for Drupal does not properly restrict access to nodes, which allows remote aut…
-
Unscored —
The Login Security module 6.x-1.x before 6.x-1.3 and 7.x-1.x before 7.x-1.3 for Drupal allows attackers to bypass inten…
-
Unscored —CVE-2013-2294 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ViewGit before 0.0.7 allow remote repository users to inject arb…
-
Unscored —CVE-2013-4241 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow re…
-
Medium 6.1
Multiple cross-site scripting (XSS) vulnerabilities in Roundup
Multiple cross-site scripting (XSS) vulnerabilities in Roundup before 1.4.20 allow remote attackers to inject arbitrary web script or HTML via the (1) @ok_message or (2) @error_message parameter to issue*.
-
High 7.7
Opencast stores passwords using outdated MD5 hash algorithm
Opencast before 8.1 stores passwords using the rather outdated and cryptographically insecure MD5 hash algorithm. Furthermore, the hashes are salted using the username instead of a random salt, causing hashes for users with the same username and password to c…
-
High 7.6
Opencast allows unauthorized public access via OAI-PMH
Opencast before 8.1 and 7.6 allows unauthorized public access to all media and metadata by default via OAI-PMH. OAI-PMH is part of the default workflow and is activated by default, requiring active user intervention of users to protect media. This leads to us…
-
Unscored —
Multiple SQL injection vulnerabilities in cgi-bin/review_m.cgi in Ex Libris ALEPH 500 (Integrated library management sy…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/tag_m.cgi in Ex Libris ALEPH 500 (Integrated library man…
-
Unscored —
E-Series SANtricity OS Controller Software version 11.60.0 is susceptible to a vulnerability which allows an attacker t…
-
Medium 5.9
Open Redirect in OAuth2 Proxy
OAuth2 Proxy before 5.0 has an open redirect vulnerability. Authentication tokens could be silently harvested by an attacker. This has been patched in version 5.0.
-
Unscored —
A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious rule configurati…
-
Unscored —
A command execution issue was found in Apache SpamAssassin prior to 3.4.3. Carefully crafted nefarious Configuration (.…
-
Unscored —
JetBrains YouTrack 2019.2 before 2019.2.59309 was vulnerable to XSS via an issue description.
-
Unscored —
In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups.
-
Unscored —
In JetBrains TeamCity before 2019.2, several user-level pages were vulnerable to XSS.
-
Unscored —
JetBrains TeamCity before 2019.2 was vulnerable to a stored XSS attack by a user with the developer role.
-
Unscored —
In JetBrains TeamCity before 2019.1.5, some server-stored passwords could be shown via the web UI.
-
Unscored —
In JetBrains TeamCity before 2019.1.5, reverse tabnabbing was possible on several pages.
-
Unscored —
In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows insta…
-
Unscored —
Ports listened to by JetBrains IntelliJ IDEA before 2019.3 were exposed to the network.
-
Unscored —
In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS.
-
Unscored —
Pandora FMS ≤ 7.42 suffers from a remote code execution vulnerability. To exploit the vulnerability, an authenticated u…
-
Unscored —
Chamilo 1.9.4 has XSS due to improper validation of user-supplied input by the chat.php script.
-
Unscored —
Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php.