Archive
27 March 2020
Vulnerabilities first published on this day (UTC), newest first.
6 results · Clear filters · Feed
-
High 7.5
An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.1…
-
High 7.3
Session / Password / Password token leak
An attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, password reset tokens and automatically generated passwords. This…
-
High 8.1
Sunnet eHRD - Broken Access Control
Sunnet eHRD, a human training and development management system, contains a vulnerability of Broken Access Control. After login, attackers can use a specific URL, access unauthorized functionality and data.
-
High 7.5
Sunnet eHRD - Sensitive Data Exposure
Sunnet eHRD, a human training and development management system, improperly stores system files. Attackers can use a specific URL and capture confidential information.
-
High 8.6
Unisoon UltraLog Express - Sensitive Data Exposure
UltraLog Express device management software stores user’s information in cleartext. Any user can obtain accounts information through a specific page.
-
High 8.1
Unisoon UltraLog Express - Broken Authentication
UltraLog Express device management interface does not properly perform access authentication in some specific pages/functions. Any user can access the privileged page to manage accounts through specific system directory.