Archive
4 December 2020
Vulnerabilities first published on this day (UTC), newest first.
27 results · Feed
-
Unscored —
The installer of Kaspersky Anti-Ransomware Tool (KART) prior to KART 4.0 Patch C was vulnerable to a DLL hijacking atta…
-
High —
Cross-Site Scripting bypass in html-purify
All versions of html-purify are vulnerable to cross-site scripting. The data attribute inside of object tags is not properly sanitized and allows javascript URIs leading to code execution. No fix is currently available. Consider using an alternative package u…
-
Medium 4.8
Cabot Cross Site Scripting (XSS) vulnerability via Address column
Cross Site Scripting (XSS) vulnerability in Arachnys Cabot 0.11.12 can be exploited via the Address column.
-
Unscored —
Null Pointer Dereference. in xObjectBindingFromExpression at moddable/xs/sources/xsSyntaxical.c:3419 in Moddable SDK be…
-
Unscored —
Heap buffer overflow at moddable/xs/sources/xsDebug.c in Moddable SDK before before 20200903. The top stack frame is on…
-
Unscored —
Invalid Memory Access in the fxProxyGetter function in moddable/xs/sources/xsProxy.c in Moddable SDK before OS200908 ca…
-
Unscored —
Heap buffer overflow in the fxCheckArrowFunction function at moddable/xs/sources/xsSyntaxical.c:3562 in Moddable SDK be…
-
Unscored —
Invalid Memory Access in fxUTF8Decode at moddable/xs/sources/xsCommon.c:916 in Moddable SDK before OS200908 causes a de…
-
Medium —
ReDOS vulnerabities: multiple grammars
### Impact: Potential ReDOS vulnerabilities (exponential and polynomial RegEx backtracking) [oswasp](https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS): > The Regular expression Denial of Service (ReDoS) is a Denial of Servi…
-
Unscored —
OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file ResetUserInfo.php that allo…
-
Unscored —
OpenSIS Community Edition before 7.5 is affected by a cross-site scripting (XSS) vulnerability in SideForStudent.php vi…
-
Unscored —
Out-of-bounds read vulnerability in GT21 model of GOT2000 series (GT2107-WTBD V01.39.000 and earlier, GT2107-WTSD V01.3…
-
Medium 6.1
OpenStack Horizon Open redirect in workflow forms
An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. There is a lack of validation of the "next" parameter, which would allow someone to supply a malicious URL in Horizon that can cau…
-
Medium 4.8
The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irre…
-
Unscored —
hw/net/e1000e_core.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address.
-
Unscored —
An issue was discovered in SonicBOOM riscv-boom 3.0.0. For LR, it does not avoid acquiring a reservation in the case wh…
-
Medium 6.8
snapcraft may build snaps with incorrect LD_LIBRARY_PATH
In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execution within the context of another snap if both plug the home interface or similar. This issue affects snapcra…
-
Unscored —
A flaw was found in ImageMagick in MagickCore/gem-private.h. An attacker who submits a crafted file that is processed b…
-
Unscored —
A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by …
-
Unscored —
A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by …
-
Unscored —
Due to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow in SubstituteString()…
-
Unscored —
A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by Im…
-
Unscored —
A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by Im…
-
Unscored —
A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by …
-
Unscored —
A flaw was found in ImageMagick in MagickCore/segment.c. An attacker who submits a crafted file that is processed by Im…
-
Unscored —
In RestoreMSCWarning() of /coders/pdf.c there are several areas where calls to GetPixelIndex() could result in values o…
-
Unscored —
A flaw was found in ImageMagick in coders/bmp.c. An attacker who submits a crafted file that is processed by ImageMagic…