Archive
2 November 2020
Vulnerabilities first published on this day (UTC), newest first.
53 results · Feed
-
Unscored —
A stack overflow issue existed in Swift for Linux. The issue was addressed with improved input validation for dealing w…
-
Medium 5.3
Observable Differences in Behavior to Error Inputs in Bouncy Castle
In Legion of the Bouncy Castle BC before 1.61 and BC-FJA before 1.0.1.2, attackers can obtain sensitive information about a private exponent because of Observable Differences in Behavior to Error Inputs. This occurs in org.bouncycastle.crypto.encodings.OAEPEn…
-
Unscored —
NeDi 1.9C allows inc/rt-popup.php d XSS.
-
Unscored —
NeDi 1.9C allows pwsec.php oid XSS.
-
High 7.5
Path Traversal
This affects versions of package browserless-chrome before 1.40.2-chrome-stable. User input flowing from the workspace endpoint gets used to create a file path filePath and this is fetched and then sent back to a user. This can be escaped to fetch arbitrary f…
-
Medium 6.5
Path Traversal
This affects all versions of package droppy. It is possible to traverse directories to fetch configuration files from a droopy server.
-
Unscored —
A command injection vulnerability exists in Moxa Inc VPort 461 Series Firmware Version 3.4 or lower that could allow a …
-
Unscored —
The Module Olea Gift On Order module through 5.0.8 for PrestaShop enables an unauthenticated user to read arbitrary fil…
-
Unscored —
Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API. An attacker can ex…
-
High 7.5
Access Restriction Bypass in go-ipfs
An issue was discovered in IPFS (aka go-ipfs) 0.4.23. An attacker can generate ephemeral identities (Sybils) and leverage the IPFS connection management reputation system to poison other nodes' routing tables, eclipsing the nodes that are the target of the at…
-
Unscored —
JUUKO K-800 (Firmware versions prior to numbers ending ...9A, ...9B, ...9C, etc.) is vulnerable to a replay attack and …
-
Unscored —
In JUUKO K-808, an attacker could specially craft a packet that encodes an arbitrary command, which could be executed o…
-
Unscored —
The cross-site scripting vulnerability has been reported to affect earlier versions of Photo Station. If exploited, the…
-
Unscored —
If exploited, this command injection vulnerability could allow remote attackers to execute arbitrary commands. This iss…
-
Unscored —
If exploited, this SQL injection vulnerability could allow remote attackers to obtain application information. This iss…
-
Unscored —
If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. This issue…
-
Unscored —
The cross-site scripting vulnerability has been reported to affect earlier versions of Photo Station. If exploited, the…
-
Unscored —
The cross-site scripting vulnerability has been reported to affect earlier versions of Photo Station. If exploited, the…
-
Unscored —
SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning.
-
Unscored —
crate has been renamed to `sn_routing`
This crate has been renamed from `routing` to `sn_routing`. The new repository location is: <https://github.com/maidsafe/sn_routing>
-
Unscored —
crate has been renamed to `qp2p`
This crate has been renamed from `quic-p2p` to `qp2p`. The new repository location is: <https://github.com/maidsafe/qp2p>
-
Unscored —
crate has been renamed to `sn_bindgen`
This crate has been renamed from `safe_bindgen` to `sn_bindgen`. The new repository location is: <https://github.com/maidsafe/sn_bindgen>
-
Unscored —
crate has been renamed to `sn_fake_clock`
This crate has been renamed from `fake_clock` to `sn_fake_clock`. The new repository location is: <https://github.com/maidsafe/sn_fake_clock>
-
Unscored —
crate has been renamed to `sn_ffi_utils`
This crate has been renamed from `ffi_utils` to `sn_ffi_utils`. The new repository location is: <https://github.com/maidsafe/sn_ffi_utils>
-
Unscored —
crate has been renamed to `safe-nd`
This crate has been renamed from `safe-nd` to `sn_data_types`. The new repository location is: <https://github.com/maidsafe/sn_data_types>
-
Unscored —
u'While processing invalid connection request PDU which is nonstandard (interval or timeout is 0) from central device m…
-
Unscored —
u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode …
-
Unscored —
u'Use after free while installing new security rule in ipcrtr as old one is deleted and this rule could still be in use…
-
Unscored —
u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom.' in Sna…
-
Unscored —
u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom' in Snap…
-
Unscored —
u'Possible buffer overflow while updating output buffer for IMEI and Gateway Address due to lack of check of input vali…
-
Unscored —
u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by XBL Loader…
-
Unscored —
u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the hypervisor' in Snapdra…
-
Unscored —
u'A buffer overflow could occur if the API is improperly used due to UIE init does not contain a buffer size a param' i…
-
Unscored —
u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of chec…
-
Unscored —
u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Informat…
-
Unscored —CVE-2020-3657 EPSS 27%
u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from…
-
Unscored —
u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying in…
-
Unscored —
u'An Unaligned address or size can propagate to the database due to improper page permissions and can lead to improper …
-
Unscored —
u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdr…