Archive
6 October 2020
Vulnerabilities first published on this day (UTC), newest first.
72 results · Feed
-
Critical 9.9
Cross-site Scripting (XSS)
This affects the package hellojs before 1.18.6. The code get the param oauth_redirect from url and pass it to location.assign without any check and sanitisation. So we can simply pass some XSS payloads into the url param oauth_redirect, such as javascript:ale…
-
Unscored —
REDDOXX MailDepot 2032 2.2.1242 allows authenticated users to access the mailboxes of other users.
-
Medium 4.2
Authenticated attackers with developer privileges in Crafter Studio may execute OS commands via deep inspection of FreeMarker template exposed objects.
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker template exposed objects. This issue affects: Crafter Software Crafter CMS 3.0 versions…
-
Unscored —
pci_change_irq_level in hw/pci/pci.c in QEMU before 5.1.1 has a NULL pointer dereference because pci_get_bus() might no…
-
Unscored —
hw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer dereference because it lacks a pointer check before an ide…
-
Medium 4.2
Authenticated attackers with developer privileges in Crafter Studio may execute OS commands via Groovy scripting.
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy scripting. This issue affects: Crafter Software Crafter CMS 3.0 versions prior to 3.0.27; 3…
-
High 7.5
ALEOS LAN-Side RPC Service Remote Code Execution
Unauthenticated RPC server on ALEOS before 4.4.9, 4.9.5, and 4.14.0 allows remote code execution.
-
Unscored —
Lack of input sanitization in UpdateRebootMgr service of ALEOS 4.11 and later allow an escalation to root from a low-pr…
-
Unscored —
The PPP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted PPP authentication …
-
Unscored —
The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packe…
-
Unscored —
Trustwave ModSecurity 3.x through 3.0.4 allows denial of service via a special request. NOTE: The discoverer reports "T…
-
Unscored —
A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A zero-length biovec reque…
-
Unscored —
An issue was discovered on URayTech IPTV/H.264/H.265 video encoders through 1.97. Attackers can send crafted unauthenti…
-
Unscored —
An issue was discovered on URayTech IPTV/H.264/H.265 video encoders through 1.97. Attackers can log in as root via the …
-
Unscored —
An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. The file-upload endp…
-
Unscored —
An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. When the administrat…
-
Unscored —
An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. Attackers can use ha…
-
Unscored —
An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. Attackers can send a…
-
Unscored —
A Persistent Cross-Site Scripting (XSS) vulnerability in message_admin.php in Projectworlds Car Rental Management Syste…
-
Unscored —
A Cross Site Request Forgery (CSRF) vulnerability in MonoCMS Blog 1.0 allows attackers to change the password of a user.
-
Unscored —
MonoCMS Blog 1.0 stores hard-coded admin hashes in the log.xml file in the source files for MonoCMS Blog. Hash type is …
-
Unscored —
manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return v…
-
Unscored —
ELECOM LAN routers (WRC-2533GST2 firmware versions prior to v1.14, WRC-1900GST2 firmware versions prior to v1.14, WRC-1…
-
Unscored —
InfoCage SiteShell series (Host type SiteShell for IIS V1.4, V1.5, and V1.6, Host type SiteShell for IIS prior to revis…
-
Unscored —
Stored cross-site scripting vulnerability in CMONOS.JP ver2.0.20191009 and earlier allows remote attackers to inject ar…
-
Unscored —
The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in sc_oberthur_rea…
-
Unscored —
The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in sc_pkcs15em…
-
Unscored —
The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcos_decipher.
-
High 7.5
Wildfly-OpenSSL memory leak flaw
A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. It may allow the attacker to cause OOM leading to a denial of service. The highest threat from this vulnerability is to system availability.
-
Unscored —CVE-2020-25637 Public exploit
A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting …
-
High 7.5CVE-2020-25613 Public exploit
WEBRick vulnerable to HTTP Request/Response Smuggling
An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a simple HTTP server bundled with Ruby, had not checked the transfer-encoding header value rigorously. An attacker may potentially exploit this issue to bypa…
-
Unscored —
A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read ov…