Archive
24 March 2020
Vulnerabilities first published on this day (UTC), newest first.
175 results · Feed
-
Medium 6.1
Bleach vulnerable to mutation XSS via whitelisted math or svg and raw tag
In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted and the keyword argument strip=False.
-
Medium 6.1
XSS in Bleach when noscript and raw tag whitelisted
In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option.
-
Unscored —
Improper input validation in Druva inSync Client 6.5.0 allows a local, authenticated attacker to execute arbitrary Node…
-
Unscored —
In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which m…
-
High 7.5
An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.…
-
High 7.5
An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.…
-
Critical 9.8
An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0. W…
-
High 7.5
An exploitable denial-of-service vulnerability exists in the resource record-parsing functionality of Videolabs libmicr…
-
High 7.5
An exploitable denial-of-service vulnerability exists in the TXT record-parsing functionality of Videolabs libmicrodns …
-
High 7.5
An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1…
-
High 7.5
An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1…
-
Unscored —
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, sensitive information is transmitted over some web application…
-
Unscored —
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, weak password requirements may allow an attacker to gain acces…
-
Unscored —
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, an attacker may gain access to the system without proper authe…
-
Unscored —
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a hard-coded cryptographic key, incr…
-
Unscored —
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a weak cryptographic algorithm, whic…
-
Unscored —
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the attacker may execute arbitrary codes or target the device,…
-
Unscored —
lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta failed to properly check for equality when validating the session coo…
-
Unscored —
ZendTo prior to 5.22-2 Beta allowed reflected XSS and CSRF via the unlock.tpl unlock user functionality.
-
Unscored —
lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta allowed IP address spoofing via the X-Forwarded-For header.
-
Unscored —
In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable due to the usage of old jQuery l…
-
Unscored —
In Honeywell WIN-PAK 4.7.2, Web and prior versions, the header injection vulnerability has been identified, which may a…
-
Unscored —
In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable to a cross-site request forgery,…
-
Unscored —
An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. Gallery leaks Private Mode thumbnail…
-
Unscored —
An issue was discovered on Samsung mobile devices with P(9.0) software. The MemorySaver Content Provider allows SQL inj…
-
Unscored —
An issue was discovered on Samsung mobile devices with N(7.1) and O(8.x) (Exynos chipsets) software. The ion debugfs dr…
-
Unscored —
An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. S-Voice leaks keyboard learned words…
-
Unscored —
An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), and P(9.0) software. Gallery has uninitialized m…
-
Unscored —
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. There is …
-
Unscored —
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. There is …
-
Unscored —
An issue was discovered on Samsung mobile devices with P(9.0) software. The Settings application allows unauthenticated…
-
Unscored —
An issue was discovered on Samsung mobile devices with P(9.0) software. Secure Startup leaks keyboard suggested words. …
-
Unscored —
An issue was discovered on Samsung mobile devices with P(9.0) software. The Pin Window feature allows unauthenticated u…
-
Unscored —
An issue was discovered on Samsung mobile devices with P(9.0) software. Secure Folder leaks preview data of recent apps…
-
Unscored —
An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. Gallery leaks a thumbnail of Private…
-
Unscored —
An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. Attackers can bypass Factory Reset P…
-
Unscored —
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. Allshare allows attackers t…
-
Unscored —
An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. There is time-based SQL injection in…
-
Unscored —
An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) (Broadcom Wi-Fi, and SEC Wi-Fi chipsets) softw…
-
Unscored —
An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), Go(8.1), P(9.0), and Go(9.0) (Exynos chipsets) s…