Archive
12 May 2020
Vulnerabilities first published on this day (UTC), newest first.
47 results · Feed
-
Unscored —
Improper access control in Groupfolders app 4.0.3 allowed to delete hidden directories when when renaming an accessible…
-
Unscored —
An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnera…
-
Unscored —
An Insecure direct object reference vulnerability in Nextcloud Server 18.0.2 allowed an attacker to remote wipe devices…
-
Unscored —
A missing verification of the TLS host in Nextcloud Mail 1.1.3 allowed a man in the middle attack.
-
High 8.6
False-negative validation results in MINT transactions with invalid baton
In SLP Validate (npm package slp-validate) before version 1.2.1, users could experience false-negative validation outcomes for MINT transaction operations. A poorly implemented SLP wallet could allow spending of the affected tokens which would result in the d…
-
High 8.6
False-negative validation results in MINT transactions with invalid baton
SLPJS (npm package slpjs) before version 0.27.2, has a vulnerability where users could experience false-negative validation outcomes for MINT transaction operations. A poorly implemented SLP wallet could allow spending of the affected tokens which would resul…
-
Low 2.2
Improper Restriction of Operations within the Bounds of a Memory Buffer in FreeRDP
In FreeRDP after 1.1 and before 2.0.0, a stream out-of-bounds seek in rdp_read_font_capability_set could lead to a later out-of-bounds read. As a result, a manipulated client or server might force a disconnect due to an invalid data read. This has been fixed …