Skip to content
OpenAdvisories

Archive

28 April 2020

Vulnerabilities first published on this day (UTC), newest first.

28 results · Clear filters · Feed

  • Medium 5.5

    ABB System 800xA Weak File Permissions - different products

    Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M (versions 6.0 and earlier) and Control Builder M Professional, MMSServer for AC800M, Base Software for SoftControl (version 6.1 and earlier) allow low p…

  • Medium 6.1

    BIP LI01 output reordering may cause malformed SLP MINT transactions in Electron-Cash-SLP

    Electron-Cash-SLP before version 3.6.2 has a vulnerability. All token creators that use the "Mint Tool" feature of the Electron Cash SLP Edition are at risk of sending the minting authority baton to the wrong SLP address. Sending the mint baton to the wrong a…

  • Medium 6.5

    Insufficient Session Expiration in Apache NiFi Registry

    If NiFi Registry 0.1.0 to 0.5.0 uses an authentication mechanism other than PKI, when the user clicks Log Out, NiFi Registry invalidates the authentication token on the client side but not on the server side. This permits the user's client-side token to be us…

  • Medium 6.8

    Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7000 before 1.0.1.60,…

  • Medium 4.8

    Certain NETGEAR devices are affected by reflected XSS. This affects JNR1010v2 before 1.1.0.46, JR6150 before 1.0.1.10, …

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befo…

  • Medium 4.5

    Information disclosure

    When user downloads PGP or S/MIME keys/certificates, exported file has same name for private and public keys. Therefore it's possible to mix them and to send private key to the third-party instead of public key. This issue affects ((OTRS)) Community Edition: …

  • Medium 4.3

    IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authent…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befo…