Archive
14 December 2020
Vulnerabilities first published on this day (UTC), newest first.
90 results · Feed
-
Critical 9.8
Authentication Bypass in github.com/russellhaering/gosaml2
The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of proces…
-
Critical 9.8
The encoding/xml package in Go (all versions) does not correctly preserve the semantics of element namespace prefixes d…
-
Critical 9.8
The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during…
-
Unscored —
GateOne allows remote attackers to execute arbitrary commands via shell metacharacters in the port field when attemptin…
-
Unscored —
A cross-site scripting (XSS) vulnerability exists in the SabaiApps WordPress Directories Pro plugin version 1.3.45 and …
-
Unscored —
A cross-site scripting (XSS) vulnerability in the SabaiApp Directories Pro plugin 1.3.45 for WordPress allows remote at…
-
Unscored —
Insecure direct object reference vulnerability in Zyxel’s P1302-T10 v3 with firmware version 2.00(ABBX.3) and earlier a…
-
High 7.8
curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead t…
-
Unscored —
Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0…
-
Unscored —
Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0…
-
Unscored —
curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password…
-
Unscored —
A security issue was found in EdgePower 24V/54V firmware v1.7.0 and earlier where, due to missing CSRF protections, an …
-
Unscored —
An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as S…
-
Unscored —
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verificati…
-
Unscored —
Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.
-
High 7.5
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildca…
-
Low 3.7
A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP ad…
-
Unscored —
OpenAsset Digital Asset Management (DAM) 12.0.19 and earlier failed to implement access controls on /Stream/ProjectsCSV…
-
High 8.8
Type confusion in Gallagher Command Centre Server allows a remote attacker to crash the server or possibly cause remote…
-
Unscored —
OpenAssetDigital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input, incorporating …
-
High 7.1
Improper Authentication vulnerability in Gallagher Command Centre Server allows an unauthenticated remote attacker to c…
-
High 8.2
SQL Injection vulnerability in Enterprise Data Interface of Gallagher Command Centre allows a remote attacker with 'Edi…
-
High 8.8
Medtronic MyCareLink Smart Time-of-check Time-of-use Race Condition
Medtronic MyCareLink Smart 25000 is vulnerable to a race condition in the MCL Smart Patient Reader software update system, which allows unsigned firmware to be uploaded and executed on the Patient Reader. If exploited, an attacker could remotely execute code …
-
High 8.8
Medtronic MyCareLink Smart Heap-based Buffer Overflow
Medtronic MyCareLink Smart 25000 is vulnerable when an authenticated attacker runs a debug command, which can be sent to the patient reader and cause a heap overflow event within the MCL Smart Patient Reader software stack. The heap overflow could allow an a…
-
High 8.0
Medtronic MyCareLink Smart Improper Authentication
Medtronic MyCareLink Smart 25000 contains an authentication protocol vulnerability where the method used to authenticate between the MCL Smart Patient Reader and the Medtronic MyCareLink Smart mobile app is vulnerable to bypass. This vulnerability enables an …
-
Unscored —
OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input in multiple pa…
-
Unscored —
OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly verify whether a request made to the applic…
-
Unscored —
OpenAsset Digital Asset Management (DAM) through 12.0.19, does not correctly sanitize user supplied input in multiple p…
-
Critical 9.8
QuantConnect Lean vulnerable to insecure deserialization
QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling property in Json.NET library.
-
Unscored —
OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly determine the HTTP request's originating IP…
-
Medium 6.5
URL Spoofing Vulnerability in Bitdefender SafePay (VA-8958)
An Origin Validation Error vulnerability in the SafePay component of Bitdefender Antivirus Plus allows a web resource to misrepresent itself in the URL bar. This issue affects: Bitdefender Antivirus Plus versions prior to 25.0.7.29.
-
Unscored —
The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal (WMT) Playout Server 20.2.8 and earlie…
-
Unscored —
GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the ne…
-
Unscored —
GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the ne…
-
Unscored —
SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user.
-
Unscored —
A vulnerability in the MIME message handling of the Notes client (versions 9 and 10) could potentially be exploited by …
-
Unscored —
SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands…
-
Unscored —
A vulnerability in the MIME message handling of the Domino server (versions 9 and 10) could potentially be exploited by…
-
Unscored —
An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attac…
-
Low 2.8
Apache Airflow logs passwords in plaintext
In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logged in plain text in the Log table in Airflow Metadatase. Same happened when creating a Connection with a password field.