Archive
30 July 2020
Vulnerabilities first published on this day (UTC), newest first.
4 results · Clear filters · Feed
-
Medium 6.1CVE-2020-15129 Scanner template
Open redirect in Traefik
In Traefik before versions 1.7.26, 2.2.8, and 2.3.0-rc3, there exists a potential open redirect vulnerability in Traefik's handling of the "X-Forwarded-Prefix" header. The Traefik API dashboard component doesn't validate that the value of the header "X-Forwar…
-
Medium 5.9
IBM Security Guardium 10.5, 10.6, and 11.1 uses weaker than expected cryptographic algorithms that could allow an attac…
-
Medium 5.3
IBM Security Guardium 10.5, 10.6, and 11.1 could disclose sensitive information on the login page that could aid in fur…
-
Medium —
Denial of service in fastify
A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger resource exhaustion (when the allErrors option is used) with specially crafted schemas.