Archive
24 June 2020
Vulnerabilities first published on this day (UTC), newest first.
10 results · Clear filters · Feed
-
Medium —
img_auth.php may leak private extension images into the public cache
In MediaWiki before 1.31.8, 1.32.x and 1.33.x before 1.33.4, and 1.34.x before 1.34.2, private wikis behind a caching server using the img_auth.php image authorization security feature may have had their files cached publicly, so any unauthorized user could v…
-
Medium 4.4
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory…
-
Medium —
Directory traversal outside of SENDFILE_ROOT in django-sendfile2
django-sendfile2 currently relies on the backend to correctly limit file paths to `SENDFILE_ROOT`. This is not the case for the `simple` and `development` backends, it is also not necessarily the case for any of the other backends either (it's just an assumpt…
-
Medium 6.1
GleamTech FileUltimate Cross-site Scripting
The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document.
-
Medium 5.9
IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information, caused by the failure to…
-
Medium 5.3
IBM Security Secret Server 10.7 could disclose sensitive information included in installation files to an unauthorized …
-
Medium 6.1
IBM Security Secret Server 10.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra…
-
Medium 4.3
IBM Security Secret Server 10.7 could allow a remote attacker to hijack the clicking action of the victim. By persuadin…
-
Medium 6.1
RVD#2561: Unprotected BIOS allows user to boot from live OS image.
The BIOS onboard MiR's Computer is not protected by password, therefore, it allows a Bad Operator to modify settings such as boot order. This can be leveraged by a Malicious operator to boot from a Live Image.
-
Medium 6.4
RVD#2562: Booting from a live image leads to exfiltration of sensible information and privilege escalation
There is no mechanism in place to prevent a bad operator to boot from a live OS image, this can lead to extraction of sensible files (such as the shadow file) or privilege escalation by manually adding a new user with sudo privileges on the machine.