Skip to content
OpenAdvisories

Archive

1 June 2020

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.5

    Python-RSA decryption of ciphertext leads to DoS

    Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affect…

  • High 8.1

    Insecure serialization leading to RCE in serialize-javascript

    serialize-javascript prior to 3.1.0 allows remote attackers to inject arbitrary code via the function "deleteFunctions" within "index.js".

  • High 7.5

    HTTP Request Smuggling in reel

    reel through 0.6.1 allows Request Smuggling attacks due to incorrect Content-Length and Transfer encoding header parsing. It is possible to conduct HTTP request smuggling attacks by sending the Content-Length header twice. Furthermore, invalid Transfer Encodi…