Archive
14 March 2020
Vulnerabilities first published on this day (UTC), newest first.
12 results · Feed
-
Unscored —
antiX and MX Linux allow local users to achieve root access via "persist-config --command /bin/sh" because of the Sudo …
-
Unscored —
An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1.
-
Unscored —
An issue was discovered in Janus through 0.9.1. janus_audiobridge.c has a double mutex unlock when listing private room…
-
Unscored —
An issue was discovered in Janus through 0.9.1. janus.c tries to use a string that doesn't actually exist during a "que…
-
Unscored —
An issue was discovered in Janus through 0.9.1. plugins/janus_voicemail.c in the VoiceMail plugin has a race condition …
-
Unscored —
An issue was discovered in Janus through 0.9.1. janus.c has multiple concurrent threads that misuse the source property…
-
Unscored —
An issue was discovered in Janus through 0.9.1. plugins/janus_videocall.c in the VideoCall plugin mishandles session ma…
-
Critical 9.8
Potential buffer overflow in psd-tools
An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malicious data.
-
Unscored —
The sitepress-multilingual-cms (WPML) plugin before 4.3.7-b.2 for WordPress has CSRF due to a loose comparison. This le…
-
Unscored —
grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, does not validate the address provided as part…
-
Unscored —
grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, mishandles font loading by a guest through a g…
-
Unscored —
An issue was discovered in Responsive Filemanager through 9.14.0. In the ajax_calls.php file in the save_img action in …