Archive
19 September 2020
Vulnerabilities first published on this day (UTC), newest first.
12 results · Feed
-
High 7.5
Array size is not checked in sized-chunks
An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with unit().
-
Unscored —
An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size i…
-
Unscored —
An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, clone can have a…
-
Unscored —
An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, insert_from can …
-
Unscored —
An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the InlineArray implementation, an unalign…
-
Unscored —
Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP arch…
-
Unscored —
An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. It does not validate all URLs before requestin…
-
Unscored —
An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. imgproxy in plugins/af_proxy_http/init.php mis…
-
Unscored —
An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. The cached_url feature mishandles JavaScript i…
-
Unscored —
webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header…
-
High 8.7
RFD Protection Bypass via jsessionid
In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid pa…
-
High 7.5
An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size i…