Archive
17 June 2020
Vulnerabilities first published on this day (UTC), newest first.
52 results · Feed
-
Medium 4.9
A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer
An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger the assertion failure with a specially constructed zone, denying service to clients.
-
Medium 4.9
A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer
In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND 9.14.9 -> 9.14.12, BIND 9.16.0 -> 9.16.3, BIND Supported Preview Edition 9.11.14-S1 -> 9.11.19-S1: Unless a nameserver is providing authoritative service for one or more zones and at least one zone contains …
-
Unscored —
The wireless-communication feature of the ABUS Secvest FUBE50001 device does not encrypt sensitive data such as PIN cod…
-
High 7.5
golang.org/x/text Infinite loop
The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder insta…
-
Unscored —CVE-2020-14408 Scanner template
An issue was discovered in Agentejo Cockpit 0.10.2. Insufficient sanitization of the to parameter in the /auth/login ro…
-
Unscored —
JSON:API PATCH requests may bypass validation for certain fields. By default, JSON:API works in a read-only mode which …
-
Medium 5.3
IBM Business Automation Workflow and IBM Business Process Manager (IBM Business Process Manager Express 8.5.5, 8.5.6, 8…
-
Unscored —
All versions up to 10.06 of ZTEMarket APK are impacted by an information leak vulnerability. Due to Activity Component …
-
Unscored —CVE-2020-9332 Public exploit
ftusbbus2.sys in FabulaTech USB for Remote Desktop through 2020-02-19 allows privilege escalation via crafted IoCtl cod…
-
Unscored —
An issue was discovered in the stashcat app through 3.9.2 for macOS, Windows, Android, iOS, and possibly other platform…
-
Unscored —
In OMERO before 5.6.1, group owners can access members' data in other groups.
-
Unscored —
OMERO before 5.6.1 makes the details of each user available to all users.
-
Medium 5.7
OMERO-web Sensitive Data Exposure
OMERO.web before 5.6.3 optionally allows sensitive data elements (e.g., a session key) to be passed as URL query parameters. If an attacker tricks a user into clicking a malicious link in OMERO.web, the information in the query parameters may be exposed in th…
-
Unscored —
In ome.services.graphs.GraphTraversal.findObjectDetails in Open Microscopy Environment OMERO.server 5.1.0 through 5.6.0…
-
Unscored —
In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading of files from imported image filesets may …
-
High 7.5
Arbitrary File Write via Archive Extraction (Zip Slip)
In all versions of the package github.com/unknwon/cae/tz, the ExtractTo function doesn't securely escape file paths in zip archives which include leading or non-leading "..". This allows an attacker to add or replace files system-wide.
-
High 7.5
Arbitrary File Write via Archive Extraction (Zip Slip)
In all versions of the package github.com/unknwon/cae/zip, the ExtractTo function doesn't securely escape file paths in zip archives which include leading or non-leading "..". This allows an attacker to add or replace files system-wide.
-
Unscored —
An issue was discovered in LibVNCServer before 0.9.13. libvncclient/tls_openssl.c has a NULL pointer dereference.
-
Unscored —
An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rfbregion.c has a NULL pointer dereference.
-
Unscored —
An issue was discovered in LibVNCServer before 0.9.13. An improperly closed TCP connection causes an infinite loop in l…
-
Unscored —
An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint32_t pointers in libvn…
-
Unscored —
An issue was discovered in LibVNCServer before 0.9.13. Byte-aligned data is accessed through uint16_t pointers in libvn…
-
Unscored —
An issue was discovered in LibVNCServer before 0.9.13. libvncserver/scale.c has a pixel_value integer overflow.
-
Unscored —
An issue was discovered in LibVNCServer before 0.9.13. libvncserver/corre.c allows out-of-bounds access via encodings.
-
Unscored —
An issue was discovered in LibVNCServer before 0.9.13. libvncserver/hextile.c allows out-of-bounds access via encodings.
-
Unscored —
An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rre.c allows out-of-bounds access via encodings.
-
Unscored —
An issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit TextChat size.
-
Unscored —
libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.
-
Unscored —
An issue was discovered in LibVNCServer before 0.9.13. libvncserver/ws_decode.c can lead to a crash because of unaligne…
-
Unscored —
An issue was discovered in LibVNCServer before 0.9.13. There is an information leak (of uninitialized memory contents) …
-
Unscored —
A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lea…
-
High 7.2
MJML vulnerable to path traversal
MJML prior to 4.6.3 contains a path traversal vulnerability when processing the mj-include directive within an MJML document.
-
Unscored —
TP-LINK NC200 devices through 2.1.10 build 200401, NC210 devices through 1.0.10 build 200401, NC220 devices through 1.3…
-
Unscored —
The Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bounds Read.
-
Unscored —
The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.
-
Unscored —
The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read.
-
Unscored —
The Treck TCP/IP stack before 6.0.1.66 has Improper ICMPv4 Access Control.
-
Critical 9.8CVE-2020-11910 EPSS 11%
The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read.
-
Critical 9.1
The Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow.
-
Unscored —
The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP.