Archive
6 February 2020
Vulnerabilities first published on this day (UTC), newest first.
72 results · Feed
-
Unscored —
The session.lua library in CGILua 5.1.x uses the same ID for each session, which allows remote attackers to hijack arbi…
-
Unscored —
The session.lua library in CGILua 5.2 alpha 1 and 5.2 alpha 2 uses weak session IDs generated based on OS time, which a…
-
Unscored —
A stack buffer overflow vulnerability in FortiClient for Linux 6.2.1 and below may allow a user with low privilege to c…
-
Unscored —
A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to r…
-
Unscored —
Buffer overflow in the DecodePSDPixels function in coders/psd.c in ImageMagick before 6.8.8-5 might allow remote attack…
-
Unscored —
Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick, possibly 6.8.8-5, allows remo…
-
Unscored —
The CentralNotice extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 sets the Cache-…
-
Unscored —
The gpg_ctx_add_recipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and earlier and Evolution Data…
-
Unscored —
nghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion).
-
Unscored —
Dedicated Micros DV-IP Express, SD Advanced, SD, EcoSense, and DS2 devices rely on a GUI warning to help ensure that th…
-
Unscored —
Buffer overflow in the Reclaim function in Tianocore EDK2 before SVN 16280 allows physically proximate attackers to gai…
-
Unscored —
Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtige…
-
Unscored —CVE-2012-2593 Public exploit
Cross-site scripting (XSS) vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote att…
-
Unscored —
coders/meta.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted fi…
-
Unscored —
coders/meta.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted fi…
-
Unscored —
MCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to intercept communications, o…
-
Unscored —
Google Chrome before 3.0 does not properly handle XML documents, which allows remote attackers to obtain sensitive info…
-
Unscored —
`tokio-proto` is deprecated/unmaintained
The [`tokio-proto`](https://crates.io/crates/tokio-proto) crate has been deprecated, and [its GitHub repository](https://github.com/tokio-rs/tokio-proto) has been archived. Users may be interested in [`tokio-tower`](https://crates.io/crates/tokio-tower) inste…
-
Unscored —
Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4603 and earlier (Movable Type 7), Movable …
-
Unscored —
The JMX monitoring flag in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to turn t…
-
Unscored —
The usage of Tomcat in Confluence on the Microsoft Windows operating system before version 7.0.5, and from version 7.1.…
-
Unscored —
The API in Atlassian Jira Server and Data Center before version 8.6.0 allows authenticated remote attackers to determin…
-
Unscored —
Support zip files in Atlassian Jira Server and Data Center before version 8.6.0 could be downloaded by a System Adminis…
-
Unscored —
The API in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to determine if a Jira pr…
-
Unscored —
The usage of Tomcat in Jira before version 8.5.2 allows local attackers with permission to write a dll file to a direct…
-
Unscored —
Various installation setup resources in Jira before version 8.5.2 allow remote attackers to configure a Jira instance, …
-
Unscored —
Comment properties in Atlassian Jira Server and Data Center before version 7.13.12, from 8.0.0 before version 8.5.4, an…
-
Unscored —
The OpenID client application in Atlassian Crowd before version 3.6.2, and from version 3.7.0 before 3.7.1 allows remot…
-
Unscored —
The BestWebSoft Htaccess plugin through 1.8.1 for WordPress allows wp-admin/admin.php?page=htaccess.php&action=htaccess…
-
Unscored —
There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/v…
-
Unscored —
There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in d…
-
Unscored —
There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drive…