Skip to content
OpenAdvisories

Archive

3 September 2020

Vulnerabilities first published on this day (UTC), newest first.

← August 2020 2020 / September /3 October 2020 →
  1. 1192
  2. 2134
  3. 3364
  4. 4123
  5. 51
  6. 6 
  7. 7 
  8. 852
  9. 9124
  10. 1043
  11. 11223
  12. 12 
  13. 136
  14. 1460
  15. 1553
  16. 1682
  17. 17138
  18. 18105
  19. 1912
  20. 20 
  21. 2158
  22. 2234
  23. 2376
  24. 2499
  25. 25112
  26. 26 
  27. 2711
  28. 2810
  29. 2939
  30. 3054
All Critical High Medium Low Exploited only Public exploit

21 results · Clear filters · Feed

  • Medium —
    GHSA-f52g-6jhx-586p

    Denial of Service in handlebars

    Affected versions of `handlebars` are vulnerable to Denial of Service. The package's parser may be forced into an endless loop while processing specially-crafted templates. This may allow attackers to exhaust system resources leading to Denial of Service. ## …

    handlebars npm
  • Medium 6.8
    GHSA-mfcp-34xw-p57x

    Authentication Bypass in saml2-js

    Versions of `saml2-js` prior to 2.0.5 are vulnerable to an Authentication Bypass. The package fails to enforce the assertion conditions for encrypted assertions, which may allow an attacker to reuse encrypted assertion tokens indefinitely. ## Recommendation U…

    saml2-js npm
  • Medium 5.9
    GHSA-5v7r-jg9r-vq44

    Insecure Cryptography Algorithm in simple-crypto-js

    Versions of `simple-crypto-js` prior to 2.3.0 use AES-CBC with PKCS#7 padding, which is vulnerable to padding oracle attacks. This may allow attackers to break the encryption and access sensitive data. ## Recommendation Upgrade to version 2.3.0 or later.

    simple-crypto-js npm
  • Medium —
    GHSA-xgp2-cc4r-7vf6

    Denial of Service in http-live-simulator

    Versions of `http-live-simulator` prior to 1.0.8 are vulnerable to Denial of Service. The package fails to catch an exception that causes the Node process to crash, effectively shutting down the server. This allows an attacker to send an HTTP request that cra…

    http-live-simulator npm
  • Medium 5.0
    GHSA-p77h-hv6g-fmfp

    Sensitive Data Exposure in ibm_db

    Versions of `ibm_db` prior to 2.6.0 are vulnerable to Sensitive Data Exposure. The package printed database credentials in plaintext in logs while in debug mode. ## Recommendation Upgrade to version 2.6.0 or later and ensure sensitive information was not logg…

    ibm_db npm
  • Medium 6.5
    GHSA-c3m8-x3cg-qm2c

    Configuration Override in helmet-csp

    Versions of `helmet-csp` before to 2.9.1 are vulnerable to a Configuration Override affecting the application's Content Security Policy (CSP). The package's browser sniffing for Firefox deletes the `default-src` CSP policy, which is the fallback policy. This …

    helmet-csp npm
  • Medium 6.5
    GHSA-jfcc-rm7f-xgf8

    Cross-Site Scripting in mavon-editor

    All versions of `mavon-editor` are vulnerable to Cross-Site Scripting. The package fails to sanitize entered input, allowing attackers to execute arbitrary JavaScript in a victim's browser. ## Recommendation No fix is currently available. Consider using an al…

    mavon-editor npm
  • Medium —
    GHSA-88h9-fc6v-jcw7

    Unintended Require in larvitbase-www

    All versions of `larvitbase-www` are vulnerable to an Unintended Require. The package exposes an API endpoint and passes a GET parameter unsanitized to an `require()` call. This allows attackers to execute any `.js` file in the same folder as the server is ru…

    larvitbase-www npm
  • Medium —
    GHSA-4vvp-x9h2-x2vf

    Path Traversal in public

    All versions of `public` are vulnerable to Path Traversal. This vulnerability allows an attacker to access files outside the webroot since it allows symlink navigation in the URL. ## Recommendation No fix is currently available. Do not use `public` in product…

    public npm
  • Medium —
    GHSA-fw4p-36j9-rrj3

    Denial of Service in sequelize

    Versions of `sequelize` prior to 4.44.4 are vulnerable to Denial of Service (DoS). The SQLite dialect fails to catch a `TypeError` exception for the `results` variable. The `results` value may be undefined and trigger the error on a `.map` call. This may allo…

    sequelize npm
  • Medium —
    GHSA-cr67-78jr-j94p

    Local File Inclusion in domokeeper

    All versions of `domokeeper` are vulnerable to Local File Inclusion. The `/plugin/` route passes a GET parameter unsanitized to a `require()` call. It then returns the output of `require()` in the server response. This may allow attackers to load unintended c…

    domokeeper npm
  • Medium 6.5
    GHSA-588m-9qg5-35pq

    Reverse Tabnabbing in quill

    Versions of `quill` prior to 1.3.7 are vulnerable to [Reverse Tabnabbing](https://www.owasp.org/index.php/Reverse_Tabnabbing). The package uses `target='_blank'` in anchor tags, allowing attackers to access `window.opener` for the original page when opening l…

    quill npm
  • Medium —
    GHSA-h97g-4mx7-5p2p

    Open Redirect in apostrophe

    Versions of `apostrophe` prior to 2.92.0 are vulnerable to Open Redirect. The package redirected requests to third-party websites if escaped URLs followed by a trailing `/` were appended at the end. ## Recommendation Update to version 2.92.0 or later.

    apostrophe npm
  • Medium 6.5
    GHSA-c53x-wwx2-pg96

    Cross-Site Scripting in @berslucas/liljs

    Versions of `@berslucas/liljs` prior to 1.0.2 are vulnerable to Cross-Site Scripting (XSS). The package uses the unsafe `innerHTML` function without sanitizing input, which may allow attackers to execute arbitrary JavaScript on the victim's browser. ## Recomm…

    @berslucas/liljs npm
  • Medium 6.1
    CVE-2020-23814 Scanner template

    xxl-job Multiple cross-site scripting (XSS) vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in xxl-job v2.2.0 allow remote attackers to inject arbitrary web script or HTML via (1) AppName and (2)AddressList parameter in JobGroupController.java file.

    com.xuxueli:xxl-job Maven
  • Medium 6.1
    CVE-2020-25102

    silverstripe-advancedreports vulnerable to XSS

    silverstripe-advancedreports (aka the Advanced Reports module for SilverStripe) 1.0 through 2.0 is vulnerable to Cross-Site Scripting (XSS) because it is possible to inject and store malicious JavaScript code. The affects admin/advanced-reports/DataObjectRepo…

    silverstripe-australia/advancedreports Packagist
  • Medium —
    GHSA-86mr-6m89-vgj3

    Buffer Overflow in node-weakauras-parser

    Affected versions of `node-weakauras-parser` are vulnerable to a Buffer Overflow. The `encode_weakaura` function fails to properly validate the input size. A buffer of 13835058055282163711 bytes causes an overflow on 64-bit systems. ## Recommendation Upgrade …

    node-weakauras-parser npm
  • Medium —
    GHSA-pxmp-fwjc-4x7q

    HTML Injection in marky-markdown

    All versions of `marky-markdown` are vulnerable to HTML Injection due to a validation bypass. The package only allows iframes where the source is `youtube.com` but it is possible to bypass the validation with sources where `youtube.com` is the sub-domain, suc…

    marky-markdown npm
  • Medium 6.8
    CVE-2020-7382

    Unquoted Path in Rapid7 Nexpose Installer

    Rapid7 Nexpose installer version prior to 6.6.40 contains an Unquoted Search Path which may allow an attacker on the local machine to insert an arbitrary file into the executable path. This issue affects: Rapid7 Nexpose versions prior to 6.6.40.

    Rapid7 Nexpose
  • Medium 5.8
    CVE-2020-7381

    Code Injection in Rapid7 Nexpose Installer

    In Rapid7 Nexpose installer versions prior to 6.6.40, the Nexpose installer calls an executable which can be placed in the appropriate directory by an attacker with access to the local machine. This would prevent the installer from distinguishing between a va…

    Rapid7 Nexpose
  • Medium 6.5
    CVE-2020-4337

    IBM API Connect 2018.4.1.0 through 2018.4.1.12 could allow an attacker to launch phishing attacks by tricking the serve…

    IBM API Connect