Archive
8 December 2020
Vulnerabilities first published on this day (UTC), newest first.
116 results · Feed
-
Unscored —
The official Consul Docker images 0.7.1 through 1.4.2 contain a blank password for a root user. System using the Consul…
-
Unscored —
The official elixir Docker images before 1.8.0-alpine (Alpine specific) contain a blank password for a root user. Syste…
-
Unscored —
The official znc docker images before 1.7.1-slim contain a blank password for a root user. Systems using the znc docker…
-
Unscored —
The official storm Docker images before 1.2.1 contain a blank password for a root user. Systems using the Storm Docker …
-
Unscored —
The official irssi docker images before 1.1-alpine (Alpine specific) contain a blank password for a root user. System u…
-
Unscored —
The official notary docker images before signer-0.6.1-1 contain a blank password for a root user. System using the nota…
-
Unscored —
The official spiped docker images before 1.5-alpine contain a blank password for a root user. Systems using the spiped …
-
Unscored —
The official Express Gateway Docker images before 1.14.0 contain a blank password for a root user. Systems using the Ex…
-
Unscored —
The official piwik Docker images before fpm-alpine (Alpine specific) contain a blank password for a root user. Systems …
-
Medium 6.8
PHP Phar archives could be uploaded and executed in Kirby
Kirby is a CMS. In Kirby CMS (getkirby/cms) before version 3.4.5, and Kirby Panel before version 2.5.14 , an editor with full access to the Kirby Panel can upload a PHP .phar file and execute it on the server. This vulnerability is critical if you might have …
-
High 7.7
omniauth-apple allows attacker to fake their email address during authentication
omniauth-apple is the OmniAuth strategy for "Sign In with Apple" (RubyGem omniauth-apple). In omniauth-apple before version 1.0.1 attackers can fake their email address during authentication. This vulnerability impacts applications using the omniauth-apple st…
-
Unscored —
SourceCodester Student Management System Project in PHP version 1.0 is vulnerable to stored a cross-site scripting (XSS…
-
Unscored —
Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL inje…
-
Unscored —
A Cross-Site Scripting (XSS) issue in WebUI Translation in Systran Pure Neural Server before 9.7.0 allows a threat acto…
-
Unscored —
API calls in the Translation API feature in Systran Pure Neural Server before 9.7.0 allow a threat actor to use the Sys…
-
Medium 6.8
.dev domains treated as local in Kirby
Kirby is a CMS. In Kirby CMS (getkirby/cms) before version 3.3.6, and Kirby Panel before version 2.5.14 there is a vulnerability in which the admin panel may be accessed if hosted on a .dev domain. In order to protect new installations on public servers that …
-
Medium 6.1
Cross site-scripting (XSS) moodle
The filter in the tag manager required extra sanitizing to prevent a reflected XSS risk. This affects 3.9 to 3.9.1, 3.8 to 3.8.4, 3.7 to 3.7.7, 3.5 to 3.5.13 and earlier unsupported versions. Fixed in 3.9.2, 3.8.5, 3.7.8 and 3.5.14.
-
High 8.8
Moodle incorrect access control
A vulnerability was found in Moodle where users with "Log in as" capability in a course context (typically, course managers) may gain access to some site administration capabilities by "logging in as" a System manager. This affects 3.9 to 3.9.1, 3.8 to 3.8.4,…
-
High 7.5
Moodle Denial of Service
A vulnerability was found in Moodle where the decompressed size of zip files was not checked against available user quota before unzipping them, which could lead to a denial of service risk. This affects versions 3.9 to 3.9.1, 3.8 to 3.8.4, 3.7 to 3.7.7, 3.5 …
-
Medium 6.1
Moodle Cross-site Scripting (XSS)
A vulnerability was found in Moodle 3.9 to 3.9.1, 3.8 to 3.8.4 and 3.7 to 3.7.7 where it was possible to include JavaScript in a book's chapter title, which was not escaped on the "Add new chapter" page. This is fixed in 3.9.2, 3.8.5 and 3.7.8.
-
Medium 5.9
Wildfly has a memory leak vulnerability
A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to…
-
Unscored —
A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming…
-
Unscored —CVE-2020-27818 Public exploit
A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a malicious file to be …
-
Unscored —
A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permiss…
-
Critical 9.8CVE-2020-17531 Public exploit
Deserialization flaw in EOL Tapestry 4.
A Java Serialization vulnerability was found in Apache Tapestry 4. Apache Tapestry 4 will attempt to deserialize the "sp" parameter even before invoking the page's validate method, leading to deserialization without authentication. Apache Tapestry 4 reached e…
-
Unscored —
A flaw was found in ImageMagick in MagickCore/quantum-export.c. An attacker who submits a crafted file that is processe…
-
Unscored —
A floating point math calculation in ScaleAnyToQuantum() of /MagickCore/quantum-private.h could lead to undefined behav…
-
Unscored —
A flaw was found in ImageMagick in coders/txt.c. An attacker who submits a crafted file that is processed by ImageMagic…
-
Unscored —
In ParseMetaGeometry() of MagickCore/geometry.c, image height and width calculations can lead to divide-by-zero conditi…
-
Unscored —
A flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h. An attacker who submits a …
-
Unscored —
In IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed va…
-
Unscored —
WriteOnePNGImage() from coders/png.c (the PNG coder) has a for loop with an improper exit condition that can allow an o…
-
Unscored —
There are 4 places in HistogramCompare() in MagickCore/histogram.c where an integer overflow is possible during simple …
-
Unscored —
The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory() in routine WritePALMImage() beca…
-
Unscored —
In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo(…
-
Unscored —
In the CropImage() and CropImageToTiles() routines of MagickCore/transform.c, rounding calculations performed on uncons…