Archive
1 July 2020
Vulnerabilities first published on this day (UTC), newest first.
10 results · Clear filters · Feed
-
Medium 6.5
Denial of service in table parsing in cmark-gfm
The table extension in GitHub Flavored Markdown before version 0.29.0.gfm.1 takes O(n * n) time to parse certain inputs. An attacker could craft a markdown table which would take an unreasonably long time to process, causing a denial of service. This issue do…
-
Medium 6.1
Cross-site scripting in TileServer GL
An issue was discovered in server.js in TileServer GL through 3.0.0. The content of the key GET parameter is reflected unsanitized in an HTTP response for the application's main page, causing reflected XSS.
-
Medium 5.1
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local a…
-
Medium 6.2
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local u…
-
Medium 6.2
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local u…
-
Medium 5.3
IBM MQ, IBM MQ Appliance, IBM MQ for HPE NonStop 8.0.4 and 8.1.0 could allow an attacker to cause a denial of service c…
-
Medium 5.3
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a de…
-
Medium 6.3
IBM Security Identity Manager Virtual Appliance 7.0.2 stores user credentials in plain in clear text which can be read …
-
Medium 5.9
Insecure Encryption
Data is truncated wrong when its length is greater than 255 bytes.
-
Medium 5.3
SAP Solution Manager (Trace Analysis), version 7.20, allows an attacker to perform a log injection into the trace file,…