Archive
15 March 2020
Vulnerabilities first published on this day (UTC), newest first.
26 results · Feed
-
Unscored —
A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and…
-
Unscored —
An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow…
-
Unscored —
An improper input validation vulnerability in FortiOS 6.2.1, 6.2.0, 6.0.8 and below until 5.4.0 under admin webUI may a…
-
High 7.5
A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via netwo…
-
High 7.1
A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via netwo…
-
Critical 9.8
OS Command Injection in closure-compiler-stream
closure-compiler-stream through 0.1.15 allows execution of arbitrary commands. The argument "options" of the exports function in "index.js" can be controlled by users without any sanitization.
-
Critical 9.8
OS Command Injection in gulkp-styledocco
gulp-styledocco through 0.0.3 allows execution of arbitrary commands. The argument 'options' of the exports function in 'index.js' can be controlled by users without any sanitization.
-
Critical 9.8
OS Command Injection in gulp-tape
gulp-tape through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of 'gulp-tape' options.
-
Critical 9.8
OS Command Injection in docker-compose-remote-api
docker-compose-remote-api through 0.1.4 allows execution of arbitrary commands. Within 'index.js' of the package, the function 'exec(serviceName, cmd, fnStdout, fnStderr, fnExit)' uses the variable 'serviceName' which can be controlled by users without any sa…
-
Critical 9.8
OS Command Injection in pulverizr
pulverizr through 0.7.0 allows execution of arbitrary commands. Within "lib/job.js", the variable "filename" can be controlled by the attacker. This function uses the variable "filename" to construct the argument of the exec call without any sanitization. In …
-
Critical 9.8CVE-2020-7602 Public exploit
OS Command Injection in node-prompt-here
node-prompt-here through 1.0.1 allows execution of arbitrary commands. The "runCommand()" is called by "getDevices()" function in file "linux/manager.js", which is required by the "index. process.env.NM_CLI" in the file "linux/manager.js". This function is us…
-
Critical 9.8
OS Command Injection in gulp-scss-lint
gulp-scss-lint through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands to the "exec" function located in "src/command.js" via the provided options.
-
Critical 9.1
Django Rest Framework jwt allows obtaining new token from notionally invalidated token
An issue was discovered in drf-jwt 1.15.x before 1.15.1. It allows attackers with access to a notionally invalidated token to obtain a new, working token via the refresh endpoint, because the blacklist protection mechanism is incompatible with the token-refre…
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informati…
-
Unscored —
In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote informati…
-
Unscored —
In parseTrackFragmentRun of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation.…
-
Unscored —
In readCString of Parcel.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to ar…
-
Unscored —
In libAACdec, there is a possible out of bounds read. This could lead to remote information disclosure, with no additio…
-
Unscored —
In StatsService, there is a possible out of bounds read. This could lead to local information disclosure if UBSAN were …
-
Unscored —
In app uninstallation, there is a possible set of permissions that may not be removed from a shared app ID. This could …
-
Unscored —
In overlay notifications, there is a possible hidden notification due to improper input validation. This could lead to …
-
High 7.5
Exposure of Sensitive Information to an Unauthorized Actor in Concord
An issue was discovered in Walmart Labs Concord before 1.44.0. CORS Access-Control-Allow-Origin headers have a potentially unsafe dependency on Origin headers, and are not configurable. This allows remote attackers to discover host information, nodes, API met…
-
Unscored —
v2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/config.json is owned by a low-privileged use…
-
Unscored —
v2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/add.sh and /etc/v2rayL/remove.sh are owned b…
-
Medium 5.9
TOCTOU Race Condition in Yarn
The package integrity validation in yarn < 1.19.0 contains a TOCTOU vulnerability where the hash is computed before writing a package to cache. It's not computed again when reading from the cache. This may lead to a cache pollution attack.
-
High 8.8
Improper Control of Generation of Code in doT
The dot package v1.1.2 uses Function() to compile templates. This can be exploited by the attacker if they can control the given template or if they can control the value set on Object.prototype.