Skip to content
OpenAdvisories

Archive

30 July 2020

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Medium 6.1
    CVE-2020-15129 Scanner template

    Open redirect in Traefik

    In Traefik before versions 1.7.26, 2.2.8, and 2.3.0-rc3, there exists a potential open redirect vulnerability in Traefik's handling of the "X-Forwarded-Prefix" header. The Traefik API dashboard component doesn't validate that the value of the header "X-Forwar…

  • Medium 5.9

    IBM Security Guardium 10.5, 10.6, and 11.1 uses weaker than expected cryptographic algorithms that could allow an attac…

  • Medium 5.3

    IBM Security Guardium 10.5, 10.6, and 11.1 could disclose sensitive information on the login page that could aid in fur…

  • Medium —

    Denial of service in fastify

    A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger resource exhaustion (when the allErrors option is used) with specially crafted schemas.