Skip to content
OpenAdvisories

Archive

14 March 2020

Vulnerabilities first published on this day (UTC), newest first.

12 results · Feed

  • Unscored —

    antiX and MX Linux allow local users to achieve root access via "persist-config --command /bin/sh" because of the Sudo …

  • Unscored —

    An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1.

  • Unscored —

    An issue was discovered in Janus through 0.9.1. janus_audiobridge.c has a double mutex unlock when listing private room…

  • Unscored —

    An issue was discovered in Janus through 0.9.1. janus.c tries to use a string that doesn't actually exist during a "que…

  • Unscored —

    An issue was discovered in Janus through 0.9.1. plugins/janus_voicemail.c in the VoiceMail plugin has a race condition …

  • Unscored —

    An issue was discovered in Janus through 0.9.1. janus.c has multiple concurrent threads that misuse the source property…

  • Unscored —

    An issue was discovered in Janus through 0.9.1. plugins/janus_videocall.c in the VideoCall plugin mishandles session ma…

  • Critical 9.8

    Potential buffer overflow in psd-tools

    An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malicious data.

  • Unscored —

    The sitepress-multilingual-cms (WPML) plugin before 4.3.7-b.2 for WordPress has CSRF due to a loose comparison. This le…

  • Unscored —

    grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, does not validate the address provided as part…

  • Unscored —

    grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, mishandles font loading by a guest through a g…

  • Unscored —
    CVE-2020-10567 Public exploit EPSS 20%

    An issue was discovered in Responsive Filemanager through 9.14.0. In the ajax_calls.php file in the save_img action in …