Archive
2 December 2020
Vulnerabilities first published on this day (UTC), newest first.
46 results · Feed
-
Unscored —
PHP remote file inclusion in the assign_resume_tpl method in Application/Common/Controller/BaseController.class.php in …
-
Unscored —
The Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the search.php page.
-
Unscored —
SQL injection vulnerability in BloodX 1.0 allows attackers to bypass authentication.
-
Unscored —
An SQL injection vulnerability was discovered in Online Doctor Appointment Booking System PHP and Mysql via the q param…
-
Unscored —
The file view-chair-list.php in Multi Restaurant Table Reservation System 1.0 does not perform input validation on the …
-
Unscored —
SQL injection vulnerability was discovered in Point of Sales in PHP/PDO 1.0, which can be exploited via the id paramete…
-
Unscored —
An SQL injection vulnerability was discovered in Car Rental Management System v1.0 can be exploited via the id paramete…
-
Unscored —
An SQL injection vulnerability was discovered in Gym Management System In manage_user.php file, GET parameter 'id' is v…
-
Medium 6.8
Cryptographic issues in Python oic
Python oic is a Python OpenID Connect implementation. In Python oic before version 1.2.1, there are several related cryptographic issues affecting client implementations that use the library. The issues are: 1) The IdToken signature algorithm was not checked …
-
Unscored —
An issue was discovered in Bitrix24 Bitrix Framework (1c site management) 20.0. An "User enumeration and Improper Restr…
-
Low —
UNEDITABLE_SCHEMAS and UNEDITABLE_TABLE_DESCRIPTION_MATCH_RULES not respected by frontend service backend
### Impact Any install that has `UNEDITABLE_SCHEMAS` and/or `UNEDITABLE_TABLE_DESCRIPTION_MATCH_RULES` set in the front-end, is being impacted. The value of these properties is ignored if set, allowing any user to modify table and column descriptions, even th…
-
Medium 4.3
An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially cr…
-
Medium 4.3
An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially cr…
-
Medium 4.3
An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially cr…
-
Medium 4.3
A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 parsing of compressed string tokens in binary USD files…
-
Unscored —
An exploitable Out-of-bounds Write vulnerability exists in the xls_addCell function of libxls 2.0. A specially crafted …
-
High 8.8
A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD …
-
Unscored —
An exploitable out-of-bounds read vulnerability exists in libevm (Ethereum Virtual Machine) of CPP-Ethereum. A speciall…
-
Unscored —
The official Crux Linux Docker images 3.0 through 3.4 contain a blank password for a root user. System using the Crux L…
-
Unscored —
AppImage appimaged before 1.0.3 does not properly check whether a downloaded file is a valid appimage. For example, it …
-
Unscored —CVE-2020-29240 Public exploit
Lepton-CMS 4.7.0 is affected by cross-site scripting (XSS). An attacker can inject the XSS payload in the URL field of …
-
Unscored —CVE-2020-25265 Public exploit
AppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a system-installed .desktop file by provi…
-
Unscored —
Online Birth Certificate System Project V 1.0 is affected by cross-site scripting (XSS). This vulnerability can result …
-
Medium 5.3
Cross-site scripting in Apache HttpClient
Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.
-
High 7.5
Phoenix Contact BTP Touch Panels uncontrolled resource consumption
Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unresponsive and not accurately update the display content (Denial of Service).
-
High 7.4
SQL injection in hibernate-core
A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an…
-
Critical 9.8
Prototype pollution in set-in
Prototype pollution vulnerability in 'set-in' versions 1.0.0 through 2.0.0 allows attacker to cause a denial of service and may lead to remote code execution.
-
Critical 9.8
keyget vulnerable to prototype pollution
Prototype pollution vulnerability in 'keyget' versions 1.0.0 through 2.2.0 allows attacker to cause a denial of service and may lead to remote code execution.
-
Unscored —
This release fixes a Cross Site Request Forgery vulnerability was found in Red Hat CloudForms which forces end users to…
-
Unscored —
memmap is unmaintained
The author of the `memmap` crate is unresponsive. Maintained alternatives: - [`memmap2`](https://github.com/RazrFalcon/memmap2-rs)
-
Unscored —
Textpattern CMS 4.6.2 allows CSRF via the prefs subsystem.
-
Medium 6.1
Cross-site scripting in papermerge
Multiple cross-site scripting (XSS) vulnerabilities in Papermerge before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the rename, tag, upload, or create folder function. The payload can be in a folder, a tag, or a document's filenam…
-
High 7.5
Cloud Controller is vulnerable to denial of service via YAML parsing
CAPI (Cloud Controller) versions prior to 1.101.0 are vulnerable to a denial-of-service attack in which an unauthenticated malicious attacker can send specially-crafted YAML files to certain endpoints, causing the YAML parser to consume excessive CPU and RAM.
-
Medium 4.3
Incorrect permission enforcement in UmbracoCms
Editors/LogViewerController.cs in Umbraco through 8.9.1 allows a user to visit a logviewer endpoint even if they lack Applications.Settings access.
-
Unscored —
Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long encrypted messages in function AES_GCM_…
-
Unscored —
HCL Domino is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input. A success…
-
Unscored —
HCL Notes is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input. A successf…
-
Unscored —
The elasticsearch-operator does not validate the namespace where kibana logging resource is created and due to that it …
-
Unscored —
A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB reque…
-
Medium 6.8
software-properties incorrectly validated TLS certificates
software-properties was vulnerable to a person-in-the-middle attack due to incorrect TLS certificate validation in softwareproperties/ppa.py. software-properties didn't check TLS certificates under python2 and only checked certificates under python3 if a vali…