Archive
3 December 2020
Vulnerabilities first published on this day (UTC), newest first.
55 results · Feed
-
Medium 4.4
Bypass of snapd pulseaudio restrictions
An Ubuntu-specific patch in PulseAudio created a race condition where the snap policy module would fail to identify a client connection from a snap as coming from a snap if SCM_CREDENTIALS were missing, allowing the snap to connect to PulseAudio without prope…
-
Medium —
Out-of-bounds Read in stringstream
Versions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a number is passed in the input stream (when using Node.js 4.x).
-
Medium 6.8
Blind SQL injection during the CommentGrade process
In the PrestaShop module "productcomments" before version 4.2.1, an attacker can use a Blind SQL injection to retrieve data or stop the MySQL service. The problem is fixed in 4.2.1 of the module.
-
Unscored —
An issue was discovered in the Linux kernel before 5.9.3. io_uring takes a non-refcounted reference to the files_struct…
-
High 7.5
Unsafe tar unpacking in HashiCorp go-slug
HashiCorp go-slug up to 0.4.3 did not fully protect against directory traversal while unpacking tar archives, and protections could be bypassed with specific constructions of multiple symlinks. Fixed in 0.5.0.
-
Unscored —
There is a local denial of service vulnerability in DaDa accelerator 5.6.19.816,, attackers can use constructed program…
-
Unscored —
There is a local denial of service vulnerability in Advanced SystemCare 13 PRO 13.5.0.174. Attackers can use a construc…
-
High 7.5
Apache Tomcat: Request header mix-up between HTTP/2 streams
While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated wi…
-
Unscored —
In AnyView (network police) network monitoring software 4.6.0.1, there is a local denial of service vulnerability in An…
-
Unscored —
In DriverGenius 9.61.5480.28 there is a local privilege escalation vulnerability in the driver wizard, attackers can us…
-
Unscored —
There is a local privilege escalation vulnerability in Alfredo Milani Comparetti SpeedFan 4.52. Attackers can use const…
-
Unscored —
There is a local denial of service vulnerability in the Antiy Zhijia Terminal Defense System 5.0.2.10121559 and an atta…
-
Unscored —
There is a local denial of service vulnerability in Wise Care 365 5.5.4, attackers can cause computer crash (BSOD).
-
Medium 6.4
The sort parameter in the download page /sysworkflow/en/neoclassic/reportTables/reportTables_Ajax is vulnerable to SQL …
-
Medium 6.3
An out-of-bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 uses SPECS data from binary USD …
-
High 8.8
An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.1 x64. A specially crafted HTML we…
-
Unscored —
In Saibo Cyber Game Accelerator 3.7.9 there is a local privilege escalation vulnerability. Attackers can use the constr…
-
Unscored —
A flaw was found in CImg in versions prior to 2.9.3. Integer overflows leading to heap buffer overflows in load_pnm() c…
-
Unscored —
NETSCOUT AirMagnet Enterprise 11.1.4 build 37257 and earlier has a sensor escalated privileges vulnerability that can b…
-
Unscored —
A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this…
-
Unscored —
A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local att…
-
Medium 6.1
lxml vulnerable to Cross-site Scripting
A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML…
-
High 8.8
A code execution vulnerability exists in the WebSocket functionality of Webkit WebKitGTK 2.30.0. A specially crafted we…
-
Critical 9.3
A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation. Depen…
-
High 8.8
A use-after-free vulnerability exists in a way Pixar OpenUSD 20.08 processes reference paths textual USD files. A speci…
-
High 7.8CVE-2020-14381 Public exploit
A flaw was found in the Linux kernel’s futex implementation. This flaw allows a local attacker to corrupt system memory…
-
Low 2.7
Data Amplification in Play Framework
An issue was discovered in Play Framework 2.8.0 through 2.8.4. Carefully crafted JSON payloads sent as a form field lead to Data Amplification. This affects users migrating from a Play version prior to 2.8.0 that used the Play Java API to serialize classes wi…
-
High 7.5CVE-2020-25649 EPSS 18%
XML External Entity (XXE) Injection in Jackson Databind
A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.
-
Unscored —
OpenClinic version 0.8.2 is affected by a medical/test_new.php insecure file upload vulnerability. This vulnerability a…
-
Unscored —
OpenClinic version 0.8.2 is affected by a stored XSS vulnerability in lib/Check.php that allows users of the applicatio…
-
High 7.5
XXE vulnerability in Jenkins CVS Plugin
Jenkins CVS Plugin 2.16 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
-
Medium 5.3
Missing permission checks in Jenkins Chaos Monkey Plugin
Jenkins Chaos Monkey Plugin 0.4 and earlier does not perform permission checks in an HTTP endpoint, allowing attackers with Overall/Read permission to access the Chaos Monkey page and to see the history of actions.
-
High 7.5
Missing permission checks in Jenkins Chaos Monkey Plugin
Jenkins Chaos Monkey Plugin 0.3 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to generate load and to generate memory leaks.
-
High 8.1
CSRF vulnerability in Jenkins Shelve Project Plugin
A cross-site request forgery (CSRF) vulnerability in Jenkins Shelve Project Plugin 3.0 and earlier allows attackers to shelve, unshelve, or delete a project.
-
Critical 9.8
Jenkins Plugin Installation Manager Tool did not verify plugin downloads
Jenkins Plugin Installation Manager Tool 2.1.3 and earlier does not verify plugin downloads.
-
Unscored —
OpenClinic version 0.8.2 is affected by a missing authentication vulnerability that allows unauthenticated users to acc…
-
Unscored —
Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long unreliable segments in function SNP_Rec…
-
Unscored —
Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the directory from which …
-
High 7.5
An exploitable denial-of-service vulnerability exists in the IPv4 functionality of Allen-Bradley MicroLogix 1100 Progra…
-
High 7.5
EC-CUBE Improper input validation vulnerability
Improper input validation vulnerability in EC-CUBE versions from 3.0.5 to 3.0.18 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vector.