Archive
11 June 2020
Vulnerabilities first published on this day (UTC), newest first.
123 results · Feed
-
High 7.5
Information disclosure in SSB-DB
SSB-DB version 20.0.0 has an information disclosure vulnerability. The get() method is supposed to only decrypt messages when you explicitly ask it to, but there is a bug where it's decrypting any message that it can. This means that it is returning the decry…
-
Medium 5.3
Improper Input Validation in HashiCorp Consul
HashiCorp Consul and Consul Enterprise did not appropriately enforce scope for local tokens issued by a primary data center, where replication to a secondary data center was not enabled. Introduced in 1.4.0, fixed in 1.6.6 and 1.7.4.
-
Medium 5.3
Incorrect Permission Assignment for Critical Resource in Hashicorp Consul
HashiCorp Consul and Consul Enterprise failed to enforce changes to legacy ACL token rules due to non-propagation to secondary data centers. Introduced in 1.4.0, fixed in 1.6.6 and 1.7.4.
-
Medium 5.3
Denial of Service (DoS) in HashiCorp Consul
HashiCorp Consul and Consul Enterprise could crash when configured with an abnormally-formed service-router entry. Introduced in 1.6.0, fixed in 1.6.6 and 1.7.4.
-
High 7.5
Allocation of Resources Without Limits or Throttling in Hashicorp Consul
HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0) and DNS (introduced in 1.4.3) caching feature that was vulnerable to denial of service. Fixed in 1.6.6 and 1.7.4.
-
Low 2.0
Philips IntelliBridge Enterprise IBE Insertion of Sensitive Information into Log File
Philips IntelliBridge Enterprise (IBE), Versions B.12 and prior, IntelliBridge Enterprise system integration with SureSigns (VS4), EarlyVue (VS30) and IntelliVue Guardian (IGS). Unencrypted user credentials received in the IntelliBridge Enterprise (IBE) are l…
-
Unscored —
Havoc Research discovered an authenticated Server-Side Request Forgery (SSRF) via the "JSON" data source of Redash open…
-
Medium 4.3
The Rolling Proximity Identifier used in the Apple/Google Exposure Notification API beta through 2020-05-29 enables att…
-
High 8.1
Jackson Configuration Allows Code Execution with Unknown "Serialization Gadgets"
When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary code execution. Jackson fixed this vulnerability by blacklisting known "deserialization gadgets". Spring Batch configures Jackson with glo…
-
Unscored —
Mids' Reborn Hero Designer 2.6.0.7 downloads the update manifest, as well as update files, over cleartext HTTP. Additio…
-
Unscored —
Mids' Reborn Hero Designer 2.6.0.7 has an elevation of privilege vulnerability due to default and insecure permissions …
-
Unscored —
In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible out of bounds read due to a missing bounds check. Thi…
-
Unscored —
In ce_t4t_process_select_file_cmd of ce_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check…
-
Unscored —
In avdt_msg_prs_rej of avdt_msg.cc, there is a possible out-of-bounds read due to improper input validation. This could…
-
Unscored —
In RegisterNotificationResponse::GetEvent of register_notification_packet.cc, there is a possible abort due to improper…
-
Unscored —
In getAllConfigFlags of SettingsProvider.cpp, there is a possible illegal read due to a missing permission check. This …
-
Unscored —
In the settings app, there is a possible app crash due to improper input validation. This could lead to local denial of…
-
Unscored —
In main of main.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation o…
-
Unscored —
In phNxpNciHal_write_ext of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds check. …
-
Unscored —
In btu_hcif_pin_code_request_evt, btu_hcif_link_key_request_evt, and btu_hcif_link_key_notification_evt of btu_hcif.cc,…
-
Unscored —
In hal_fd_init of hal_fd.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead …
-
Unscored —
In connect() of PanService.java, there is a possible permissions bypass. This could lead to local escalation of privile…
-
Unscored —
In InstallPackage of package.cpp, there is a possible bypass of a signature check due to a Time of Check/Time of Use co…
-
Unscored —CVE-2020-0201 Public exploit
In showSecurityFields of WifiConfigController.java there is a possible credential leak due to a confused deputy. This c…
-
Unscored —
In rw_mfc_writeBlock of rw_mfc.cc, there is a possible out of bounds read due to an incorrect bounds check. This could …
-
Unscored —
In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds read due to a missing b…
-
Unscored —
In btm_simple_pair_complete of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This c…
-
Unscored —CVE-2020-0219 Public exploit
In onCreate of SliceDeepLinkSpringBoard.java there is a possible insecure Intent. This could lead to local elevation of…
-
Unscored —
In NxpNfc::ioctl of NxpNfc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead t…
-
Unscored —
In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds write due to a missing …
-
Unscored —
In btu_hcif_hardware_error_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. Th…
-
Unscored —CVE-2020-0215 Public exploit
In onCreate of ConfirmConnectActivity.java, there is a possible leak of Bluetooth information due to a permissions bypa…
-
Unscored —
In NDEF_MsgValidate of ndef_utils.c, there is a possible out of bounds read due to an integer overflow. This could lead…
-
Unscored —
In nfa_dm_ndef_find_next_handler of nfa_dm_ndef.c, there is a possible out of bounds read due to a missing bounds check…
-
Unscored —
In btu_hcif_mode_change_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This …
-
Unscored —
In btm_proc_sp_req_evt of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check. This could …
-
Unscored —
In rw_t3t_message_set_block_list of rw_t3t.cc, there is a possible out of bounds write due to a missing bounds check. T…
-
Unscored —CVE-2020-0188 Public exploit
In onCreatePermissionRequest of SettingsSliceProvider.java, there is a possible permissions bypass due to a PendingInte…
-
Unscored —
In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to an integer overflow.…
-
Unscored —CVE-2020-0183 Public exploit
In handleMessage of BluetoothManagerService, there is an incomplete reset. This could lead to local escalation of privi…