Archive
14 February 2020
Vulnerabilities first published on this day (UTC), newest first.
4 results · Clear filters · Feed
-
Critical 9.8
Server-Side Request Forgery and Inclusion of Functionality from Untrusted Control Sphere in jsreport
An unintended require and server-side request forgery vulnerabilities in jsreport version 2.5.0 and earlier allow attackers to execute arbitrary code.
-
Critical 9.8
Code Injection in script-manager
An unintended require vulnerability in script-manager npm package version 0.8.6 and earlier may allow attackers to execute arbitrary code.
-
Critical 9.8
An exploitable out-of-bounds write vulnerability exists in the TIFreadstripdata function of the igcore19d.dll library o…
-
Critical 9.8
An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll PNG pngread parser of the Accusoft ImageGe…