Skip to content
OpenAdvisories

Archive

9 September 2020

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Low —

    personnummer/python vulnerable to Improper Input Validation

    This vulnerability was reported to the personnummer team in June 2020. The slow response was due to locked ownership of some of the affected packages, which caused delays to update packages prior to disclosure. The vulnerability is determined to be low severi…

  • Low —

    personnummer/csharp vulnerable to Improper Input Validation

    This vulnerability was reported to the personnummer team in June 2020. The slow response was due to locked ownership of some of the affected packages, which caused delays to update packages prior to disclosure. The vulnerability is determined to be low severi…

  • Low —

    personnummer/php vulnerable to Improper Input Validation

    This vulnerability was reported to the personnummer team in June 2020. The slow response was due to locked ownership of some of the affected packages, which caused delays to update packages prior to disclosure. The vulnerability is determined to be low severi…

  • Low 3.3

    PAN-OS: Passwords may be logged in clear text while storing operational command (op command) history

    An information exposure through log file vulnerability where an administrator's password or other sensitive information may be logged in cleartext while using the CLI in Palo Alto Networks PAN-OS software. The opcmdhistory.log file was introduced to track ope…

  • Low 3.3

    PAN-OS: Passwords may be logged in clear text when using after-change-detail custom syslog field for config logs

    An information exposure through log file vulnerability where sensitive fields are recorded in the configuration log without masking on Palo Alto Networks PAN-OS software when the after-change-detail custom syslog field is enabled for configuration logs and th…

  • Low 3.7

    Raccoon attack

    The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker bein…