Skip to content
OpenAdvisories

Archive

5 August 2020

Vulnerabilities first published on this day (UTC), newest first.

← July 2020 2020 / August /5 September 2020 →
  1. 1 
  2. 2 
  3. 332
  4. 427
  5. 530
  6. 629
  7. 731
  8. 815
  9. 93
  10. 1048
  11. 1163
  12. 1262
  13. 13112
  14. 1430
  15. 15 
  16. 162
  17. 17169
  18. 1817
  19. 1957
  20. 2016
  21. 2170
  22. 22 
  23. 231
  24. 2441
  25. 2553
  26. 26105
  27. 2754
  28. 2817
  29. 298
  30. 307
  31. 3174
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 5.0
    GHSA-5cp4-xmrw-59wf

    XSS via JQLite DOM manipulation functions in AngularJS

    ### Summary XSS may be triggered in AngularJS applications that sanitize user-controlled HTML snippets before passing them to `JQLite` methods like `JQLite.prepend`, `JQLite.after`, `JQLite.append`, `JQLite.replaceWith`, `JQLite.append`, `new JQLite` and `ang…

    angular npm
  • Medium 6.8
    GHSA-whrh-9j4q-g7ph

    CSRF Vulnerability in polaris-website

    ### Impact CSRF vulnerability: In some very specific circumstances, an attacker would be able to update your settings. Basically you would need to navigate to hackersite.com while logged into our panel. Then they could modify your settings. They couldn't chec…

    polaris-website npm
  • Medium 5.3
    CVE-2020-15132

    Reset Password / Login vulnerability in Sulu

    In Sulu before versions 1.6.35, 2.0.10, and 2.1.1, when the "Forget password" feature on the login screen is used, Sulu asks the user for a username or email address. If the given string is not found, a response with a `400` error code is returned, along with…

    sulu sulu sulu/sulu Packagist
  • Medium 6.5
    CVE-2020-15112

    Improper Input Validation in etcd

    In etcd before versions 3.3.23 and 3.4.10, it is possible to have an entry index greater then the number of entries in the ReadAll method in wal/wal.go. This could cause issues when WAL entries are being read during consensus as an arbitrary etcd consensus pa…

    etcd-io etcd etcd etcd Debian Ubuntu Azure Linux
  • Medium 6.1
    CVE-2020-16254

    CSS Injection in Chartkick gem

    The Chartkick gem through 3.3.2 for Ruby allows Cascading Style Sheets (CSS) Injection (without attribute).

    chartkick RubyGems
  • Medium 5.7
    CVE-2020-15113

    Improper Preservation of Permissions in etcd

    In etcd before versions 3.3.23 and 3.4.10, certain directory paths are created (etcd data directory and the directory path when provided to automatically generate self-signed certificates for TLS connections with clients) with restricted access permissions (7…

    etcd-io etcd etcd etcd Debian Ubuntu Azure Linux Go
  • Medium 6.5
    CVE-2020-15106

    Improper Input Validation in etcd

    In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method. The size of a record is stored in the length field of a WAL file and no additional validation is done on this data. Therefore, it is possible to forge an extremely l…

    etcd-io etcd etcd etcd Debian Ubuntu Azure Linux Go
  • Medium 4.3
    CVE-2020-16252

    Field Test CSRF vulnerability

    The Field Test gem 0.2.0 through 0.3.2 for Ruby allows CSRF.

    field_test RubyGems
  • Medium 5.5
    CVE-2020-14347

    A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the …

    The Xorg Project xorg-x11-server xorg-server xorg-server Debian Ubuntu Alpine
  • Medium 6.7
    CVE-2020-14344

    An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in l…

    The X11 Project libX11 libx11 libx11 Debian Ubuntu Alpine