Archive
5 August 2020
Vulnerabilities first published on this day (UTC), newest first.
30 results · Feed
-
Medium 5.0
XSS via JQLite DOM manipulation functions in AngularJS
### Summary XSS may be triggered in AngularJS applications that sanitize user-controlled HTML snippets before passing them to `JQLite` methods like `JQLite.prepend`, `JQLite.after`, `JQLite.append`, `JQLite.replaceWith`, `JQLite.append`, `new JQLite` and `ang…
-
Medium 6.8
CSRF Vulnerability in polaris-website
### Impact CSRF vulnerability: In some very specific circumstances, an attacker would be able to update your settings. Basically you would need to navigate to hackersite.com while logged into our panel. Then they could modify your settings. They couldn't chec…
-
Unscored —CVE-2020-9036 Scanner template
Jeedom through 4.0.38 allows XSS.
-
Unscored —
An issue was discovered in NLnet Labs Routinator 0.1.0 through 0.7.1. It allows remote attackers to bypass intended acc…
-
Unscored —
The ATOS/Sips (aka Atos-Magento) community module 3.0.0 to 3.0.5 for Magento allows command injection.
-
High 7.5
Total Protection (MTP) - Unexpected behavior violation
Unexpected behavior violation in McAfee Total Protection (MTP) prior to 16.0.R26 allows local users to turn off real time scanning via a specially crafted object making a specific function call.
-
Medium 5.3
Reset Password / Login vulnerability in Sulu
In Sulu before versions 1.6.35, 2.0.10, and 2.1.1, when the "Forget password" feature on the login screen is used, Sulu asks the user for a username or email address. If the given string is not found, a response with a `400` error code is returned, along with…
-
High 7.5
Denial of service in Contour
In Contour ( Ingress controller for Kubernetes) before version 1.7.0, a bad actor can shut down all instances of Envoy, essentially killing the entire ingress data plane. GET requests to /shutdown on port 8090 of the Envoy pod initiate Envoy's shutdown proced…
-
Unscored —
The Group module enables you to hand out permissions on a smaller subset, section or community of your website. Under v…
-
Medium 6.5
Improper Input Validation in etcd
In etcd before versions 3.3.23 and 3.4.10, it is possible to have an entry index greater then the number of entries in the ReadAll method in wal/wal.go. This could cause issues when WAL entries are being read during consensus as an arbitrary etcd consensus pa…
-
Medium 6.1
CSS Injection in Chartkick gem
The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute).
-
Medium 5.7
Improper Preservation of Permissions in etcd
In etcd before versions 3.3.23 and 3.4.10, certain directory paths are created (etcd data directory and the directory path when provided to automatically generate self-signed certificates for TLS connections with clients) with restricted access permissions (7…
-
Medium 6.5
Improper Input Validation in etcd
In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method. The size of a record is stored in the length field of a WAL file and no additional validation is done on this data. Therefore, it is possible to forge an extremely l…
-
Unscored —
The Group module enables you to hand out permissions on a smaller subset, section or community of your website. With th…
-
Unscored —
LimeSurvey 4.3.2 allows reflected XSS because application/controllers/LSBaseController.php lacks code to validate param…
-
Unscored —
USVN (aka User-friendly SVN) before 1.0.9 allows XSS via SVN logs.
-
Unscored —
An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific r…
-
High 8.1
PgHero gem allows CSRF
The PgHero gem through 2.6.0 for Ruby allows CSRF.
-
Medium 4.3
Field Test CSRF vulnerability
The Field Test gem 0.2.0 through 0.3.2 for Ruby allows CSRF.
-
Unscored —
Extreme EAC Appliance 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET request.
-
Critical 9.8CVE-2020-13921 EPSS 33%
SQL Injection in Apache SkyWalking
**Resolved** Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL injection vulnerability in the wildcard query cases.
-
High 8.2
IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 is vulnerable to an XML External Entity Injection (XX…
-
Low 3.7
IBM Security Identity Governance and Intelligence 5.2.6 Virtual Appliance could allow a remote attacker to obtain sensi…
-
Unscored —
CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, CENTUM VP (includes CENTUM VP Small, …
-
Unscored —
Directory traversal vulnerability in CAMS for HIS CENTUM CS 3000 (includes CENTUM CS 3000 Small) R3.08.10 to R3.09.50, …
-
Medium 5.5
A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the …
-
Medium 6.7
An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in l…
-
Unscored —
scm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x through 2.21.4, when -dsafe is used, lacks restr…
-
Unscored —
Aerospike Community Edition 4.9.0.5 allows for unauthenticated submission and execution of user-defined functions (UDFs…
-
Unscored —
Affected versions of Atlassian Fisheye allow remote attackers to view the HTTP password of a repository via an Informat…