Skip to content
OpenAdvisories

Archive

19 April 2020

Vulnerabilities first published on this day (UTC), newest first.

4 results · Feed

  • Unscored —

    In the media-library-assistant plugin before 2.82 for WordPress, Remote Code Execution can occur via the tax_query, met…

  • Critical 9.8

    Improper Authenication in Pion DTLS

    handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application data with epoch 0, which allows remote attackers to inject arbitrary unencrypted data after handshake completion.

  • Unscored —

    Ming (aka libming) 0.4.8 has a heap-based buffer over-read (8 bytes) in the function decompileIF() in decompile.c.

  • Unscored —

    Ming (aka libming) 0.4.8 has a heap-based buffer over-read (2 bytes) in the function decompileIF() in decompile.c.