Skip to content
OpenAdvisories

Archive

21 July 2020

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.8

    Exposure of Resource to Wrong Sphere in LibreNMS

    An issue was discovered in LibreNMS before 1.65.1. It has insufficient access control for normal users because of "'guard' => 'admin'" instead of "'middleware' => ['can:admin']" in routes/web.php.

  • High 8.2

    PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier: Improper path sanitation vulnerability.

    In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on import of project files.

  • High 7.5

    Improper Input Validation in sails-hook-sockets

    Sails.js before v1.0.0-46 allows attackers to cause a denial of service with a single request because there is no error handler in sails-hook-sockets to handle an empty pathname in a WebSocket request.