Archive
11 August 2020
Vulnerabilities first published on this day (UTC), newest first.
63 results · Feed
-
Unscored —
The web server in the Teradici Managament console versions 20.04 and 20.01.1 did not properly set the X-Frame-Options H…
-
Unscored —
content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields['name'] to appendSubheading.
-
Unscored —
Turcom TRCwifiZone through 2020-08-10 allows authentication bypass by visiting manage/control.php and ignoring 302 Redi…
-
Unscored —
Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mecha…
-
Unscored —
Firejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output-stderr option, which may…
-
Unscored —
Firejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option, which may lead to com…
-
Unscored —
In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e a…
-
Unscored —
SOPlanning 1.46.01 allows persistent XSS via the Project Name, Statutes Comment, Places Comment, or Resources Comment f…
-
Unscored —
SABnzbd 2.3.9 and 3.0.0Alpha2 has a command injection vulnerability in the web configuration interface that permits an …
-
Unscored —
An elevation of privilege vulnerability exists in ManageEngine ADSelfService Plus before build 6003 because it does not…
-
Medium 4.3
CSRF tokens leaked in URL by canned query form
### Impact The HTML form for a read-only canned query includes the hidden CSRF token field added in #798 for writable canned queries (#698). This means that submitting those read-only forms exposes the CSRF token in the URL - for example on https://latest.dat…
-
Unscored —
An information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1. This flaw allows an attacke…
-
Unscored —
Red Hat CloudForms 4.7 and 5 is affected by CSV Injection flaw, a crafted payload stays dormant till a victim export as…
-
Unscored —
A high severity vulnerability was found in all active versions of Red Hat CloudForms before 5.11.7.0. The out of band O…
-
Unscored —
Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw. With the access to add Ansible …
-
Unscored —
Red Hat CloudForms before 5.11.7.0 was vulnerable to the User Impersonation authorization flaw which allows malicious a…
-
Unscored —
Red Hat CloudForms 4.7 and 5 leads to insecure direct object references (IDOR) and functional level access control bypa…
-
Unscored —
Red Hat CloudForms 4.7 and 5 is affected by a role-based privilege escalation flaw. An attacker with EVM-Operator group…
-
Unscored —
In Red Hat CloudForms 4.7 and 5, the read only widgets can be edited by inspecting the forms and dropping the disabled …
-
Unscored —
A cross-site scripting flaw was found in Report Menu feature of Red Hat CloudForms 4.7 and 5. An attacker could use thi…
-
High 8.1
IBM QRadar 7.2.0 thorugh 7.2.9 could allow an authenticated user to overwrite or delete arbitrary files due to a flaw a…
-
Medium 6.5
IBM QRadar 7.2.0 through 7.2.9 could allow an authenticated user to disable the Wincollect service which could aid an a…
-
Unscored —
FusionSphere OpenStack 8.0.0 have a protection mechanism failure vulnerability. The product incorrectly uses a protecti…