Archive
26 November 2020
Vulnerabilities first published on this day (UTC), newest first.
19 results · Feed
-
Unscored —CVE-2020-12262 Scanner template
Intelbras TIP200 60.61.75.15, TIP200LITE 60.61.75.15, and TIP300 65.61.75.15 devices allow /cgi-bin/cgiServer.exx?page=…
-
Unscored —
ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even i…
-
Unscored —
Cloudera Data Engineering (CDE) before 1.1 was vulnerable to a CSRF attack.
-
Unscored —
An issue was discovered in BigBlueButton through 2.2.29. A brute-force attack may occur because an unlimited number of …
-
Unscored —
An issue was discovered in BigBlueButton through 2.2.29. When at attacker is able to view an account_activations/edit?t…
-
Unscored —
Intelbras TIP 200 60.61.75.15, TIP 200 LITE 60.61.75.15, and TIP 300 65.61.75.22 devices allow cgi-bin/cgiServer.exx?pa…
-
Unscored —
In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference (IDOR) vulnerability that allow…
-
Unscored —
In GLPI before 9.5.3, ajax/comments.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an att…
-
Unscored —
Zetetic SQLCipher 4.x before 4.4.1 has a use-after-free, related to sqlcipher_codec_pragma and sqlite3Strlen30 in sqlit…
-
High 7.3
Prototype Pollution
This affects the package systeminformation before 4.30.2. The attacker can overwrite the properties and functions of an object, which can lead to executing OS commands.
-
Medium 5.3
Regular Expression Denial of Service (ReDoS)
All versions of package djvalidator are vulnerable to Regular Expression Denial of Service (ReDoS) by sending crafted invalid emails - for example, --@------------------------------------------------------------------------------------------------------------…
-
Critical 9.8
XXE in petl
petl before 1.68, in some configurations, allows resolution of entities in an XML document.
-
Unscored —
A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a r…
-
Unscored —
A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a r…
-
Unscored —
A flaw exists in the Ingress/Egress checks routine of FactoryTalk Linx Version 6.11 and prior. This vulnerability could…
-
Unscored —
A flaw was found in the spice-vdagentd daemon, where it did not properly handle client connections that can be establis…
-
Unscored —
A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw…
-
Unscored —
A flaw was found in the SPICE file transfer protocol. File data from the host system can end up in full or in parts in …
-
Unscored —
slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even …