Archive
21 April 2020
Vulnerabilities first published on this day (UTC), newest first.
65 results · Feed
-
High 8.1
Improper Input Validation in Undertow
A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x versions prior to undertow-2.1.0.Final, where the Servlet container causes servletPath to normalize incorrectly by truncating the path afte…
-
Medium 6.5
Subject Confirmation Method not validated in Saml2 Authentication Services for ASP.NET
In Saml2 Authentication Services for ASP.NET versions before 1.0.2, and between 2.0.0 and 2.6.0, there is a vulnerability in how tokens are validated in some cases. Saml2 tokens are usually used as bearer tokens - a caller that presents a token is assumed to …
-
High 7.5
A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5, v14.2.6, v15.0.0 of Cep…
-
Medium 5.2
NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.
-
Medium 5.2
NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.
-
Medium 5.2
NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.
-
Medium 5.2
NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.
-
Unscored —
A Denial of Service vulnerability related to stack exhaustion has been identified in FlexNet Publisher lmadmin.exe 11.1…
-
Unscored —
A Denial of Service vulnerability related to command handling has been identified in FlexNet Publisher lmadmin.exe vers…
-
Medium 5.2
NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.
-
Medium 5.2
NETGEAR ReadyNAS OS 6 devices, running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.
-
Medium 5.2
NETGEAR ReadyNAS OS 6 devices, running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.
-
Medium 4.0
NETGEAR ReadyNAS OS 6 devices, running ReadyNAS OS versions prior to 6.8.0 are affected by incorrect configuration of s…
-
Medium 5.2
NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.
-
Medium 5.2
Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15…
-
High 7.5
Segmentation fault in SSL_check_chain
Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an i…
-
Unscored —
In ColorOS (oppo mobile phone operating system, based on AOSP frameworks/native code position/services/surfaceflinger s…
-
Unscored —
In IQrouter through 3.3.1, remote attackers can control the device (restart network, reboot, upgrade, reset) because of…
-
Unscored —
In the web-panel in IQrouter through 3.3.1, remote attackers can read system logs because of Incorrect Access Control. …
-
Unscored —
In IQrouter through 3.3.1, the Lua function reset_password in the web-panel allows remote attackers to change the root …
-
Unscored —
In IQrouter through 3.3.1, there is a root user without a password, which allows attackers to gain full remote access v…
-
Unscored —
In IQrouter through 3.3.1, the Lua function diag_set_password in the web-panel allows remote attackers to change the ro…
-
Unscored —
IQrouter through 3.3.1, when unconfigured, has multiple remote code execution vulnerabilities in the web-panel because …
-
High 7.1
Link Resolution Privilege Escalation Vulnerability in Bitdefender Antivirus Free (VA-8387)
A vulnerability in the improper handling of junctions in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location. This issue affects: Bitdefender Antivirus Free versions prior to 1.0.…
-
Unscored —
re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme.