Archive
January 2020
Vulnerabilities first published in this month (UTC), newest first.
1,661 results · Feed
-
Unscored —
PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS, as demonstrated by the category and CategoryCode…
-
Unscored —
Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker…
-
Medium 6.5
Session fixation attack in Pow (Hex package)
In Pow (Hex package) before 1.0.16, the use of Plug.Session in Pow.Plug.Session is susceptible to session fixation attacks if a persistent session store is used for Plug.Session, such as Redis or a database. Cookie store, which is used in most Phoenix apps, d…
-
Unscored —
In PrestaShop 1.7.6.2, XSS can occur during addition or removal of a QuickAccess link. This is related to AdminQuickAcc…
-
Unscored —
Ming (aka libming) 0.4.8 has a heap-based buffer over-read in the function decompile_SWITCH() in decompile.c.
-
Unscored —
Ming (aka libming) 0.4.8 has z NULL pointer dereference in the function decompileGETURL2() in decompile.c.
-
Unscored —
An issue was discovered in GPAC version 0.8.0. There is a NULL pointer dereference in the function gf_isom_get_media_da…
-
Unscored —
An issue was discovered in GPAC version 0.8.0. There is a NULL pointer dereference in the function gf_m2ts_stream_proce…
-
Unscored —
jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c.
-
Unscored —
jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c.
-
Unscored —
The TablePress plugin 1.9.2 for WordPress allows tablepress[data] CSV injection by Editor users. Note: The vendor dispu…
-
High 8.8
Pivotal Ops Manager logs query parameters in tomcat access file
Pivotal Ops Manager, versions 2.4.x prior to 2.4.27, 2.5.x prior to 2.5.24, 2.6.x prior to 2.6.16, and 2.7.x prior to 2.7.5, logs all query parameters to tomcat’s access file. If the query parameters are used to provide authentication, ie. credentials, then t…
-
Unscored —
stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int.
-
Unscored —
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table.
-
Unscored —
stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek.
-
Unscored —
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8.
-
Unscored —
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT.
-
Unscored —
stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8.
-
Unscored —
stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index.
-
Unscored —
Imperva SecureSphere Web Application Firewall (WAF) before 12-august-2010 allows SQL injection filter bypass.
-
Unscored —
Snare for Linux before 1.7.0 has CSRF in the web interface.
-
Unscored —
Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword.
-
Unscored —
Koala Framework before 2011-11-21 has XSS via the request_uri parameter.
-
Unscored —
A Content-Security-Policy that blocks in-line scripts could be bypassed using an object tag to execute JavaScript in th…
-
Unscored —
Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 71. Some of these bugs showed evidence of memory corr…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some of these bugs showed ev…
-
Unscored —
After a HelloRetryRequest has been sent, the client may negotiate a lower protocol that TLS 1.3, resulting in an invali…
-
Unscored —
When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and…
-
Unscored —
During the initialization of a new content process, a race condition occurs that can allow a content process to disclos…
-
Unscored —
If an XML file is served with a Content Security Policy and the XML file includes an XSL stylesheet, the Content Securi…
-
Unscored —
When Python was installed on Windows, a python file being served with the MIME type of text/plain could be executed by …
-
Unscored —
When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve the accuracy o…
-
Unscored —
Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash. We presu…
-
Unscored —
When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @…
-
Unscored —
During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption an…
-
Unscored —
If an image had not loaded correctly (such as when it is not actually an image), it could be dragged and dropped cross-…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 70. Some of these bugs showed evidence of memory corr…
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some of these bugs showed ev…
-
Unscored —
Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could c…