Skip to content
OpenAdvisories

Archive

30 March 2020

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Low 3.7

    An issue was discovered in Proofpoint Email Protection through 2019-09-08. By collecting scores from Proofpoint email h…

  • Low 3.9

    Versiant Lynx Customer Service Portal version 3.5.2 is vulnerable to stored cross-site scripting, which may allow an attacker to execute arbitrary JavaScript

    Versiant LYNX Customer Service Portal (CSP), version 3.5.2, is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to insert malicious JavaScript that is stored and displayed to the end user. This could lead to website…

  • Low 2.6

    Prevent cache poisoning via a Response Content-Type header

    In Symfony before versions 4.4.7 and 5.0.7, when a `Response` does not contain a `Content-Type` header, affected versions of Symfony can fallback to the format defined in the `Accept` header of the request, leading to a possible mismatch between the response&…