Archive
18 September 2020
Vulnerabilities first published on this day (UTC), newest first.
105 results · Feed
-
Unscored —
An issue was discovered in 1CRM System through 8.6.7. An insecure direct object reference to internally stored files al…
-
Medium 6.1
Adobe Media Encoder PSD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated buffer, possibly resulting in a crash or disclosure of sensitive information from other memory locat…
-
Medium 6.1
Adobe Media Encoder WMV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated buffer, possibly resulting in a crash or disclosure of sensitive information from other memory locat…
-
Medium 6.1
Adobe Media Encoder FLV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated buffer, possibly resulting in a crash or disclosure of sensitive information from other memory locat…
-
Unscored —
An issue was discovered in Gradle Enterprise before 2020.2.4. Because of unrestricted cross-origin requests to read-onl…
-
Unscored —
An issue was discovered in Gradle Enterprise before 2020.2.5. The cookie used to convey the CSRF prevention token is no…
-
Unscored —
An issue was discovered in Gradle Enterprise 2018.5. An attacker can potentially make repeated attempts to guess a loca…
-
Unscored —
An issue was discovered in Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1. Cross-site transmission…
-
Unscored —
An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4. When configuring Gradle Enterprise to integrate with a …
-
Unscored —
An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4. An attacker with physical access to the browser of a us…
-
Unscored —
An issue was discovered in Gradle Enterprise 2017.1 - 2020.2.4. The /usage page of Gradle Enterprise conveys high level…
-
Unscored —
An issue was discovered in Gradle Enterprise 2018.2 - 2020.2.4. The CSRF prevention token is stored in a request cookie…
-
Unscored —
An issue was discovered in Gradle Enterprise 2017.3 - 2020.2.4 and Gradle Enterprise Build Cache Node 1.0 - 9.2. Unrest…
-
Unscored —
An issue was discovered in Gradle Enterprise 2020.2 - 2020.2.4. An XSS issue exists via the request URL.
-
Unscored —
UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website…
-
Unscored —
UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website…
-
Unscored —
Directory traversal vulnerability in WHR-G54S firmware 1.43 and earlier allows an attacker to access sensitive informat…
-
Unscored —
Cross-site scripting vulnerability in WHR-G54S firmware 1.43 and earlier allows remote attackers to inject arbitrary sc…
-
Unscored —
A buffer overflow vulnerability exists in the mg_get_http_header function in Cesanta Mongoose 6.18 due to a lack of bou…
-
Unscored —
The paGO Commerce plugin 2.5.9.0 for Joomla! allows SQL Injection via the administrator/index.php?option=com_pago&view=…
-
High 7.5
DotPlant2 Improper Restriction of XML External Entity Reference
An issue was discovered in DotPlant2 before 2020-09-14. In class Pay2PayPayment in payment/Pay2PayPayment.php, there is an XXE vulnerability in the checkResult function. The user input ($_POST['xml']) is used for simplexml_load_string without sanitization. NO…
-
Unscored —
SaferVPN before 5.0.3.3 on Windows could allow low-privileged users to create or overwrite arbitrary files, which could…
-
Unscored —
webTareas through 2.1 allows XSS in clients/editclient.php, extensions/addextension.php, administration/add_announcemen…
-
Unscored —
webTareas through 2.1 allows files/Default/ Directory Listing.
-
Unscored —
webTareas through 2.1 allows upload of the dangerous .exe and .shtml file types.