Archive
21 December 2020
Vulnerabilities first published on this day (UTC), newest first.
52 results · Feed
-
High 7.7
Hugo can execute a binary from the current directory on Windows
Hugo is a fast and Flexible Static Site Generator built in Go. Hugo depends on Go's `os/exec` for certain features, e.g. for rendering of Pandoc documents if these binaries are found in the system `%PATH%` on Windows. In Hugo before version 0.79.1, if a malic…
-
Unscored —
An issue was discovered in the GlobalUsage extension for MediaWiki through 1.35.1. SpecialGlobalUsage.php calls WikiMap…
-
Unscored —
An issue was discovered in the CasAuth extension for MediaWiki through 1.35.1. Due to improper username validation, it …
-
Unscored —
An issue was discovered in the SecurePoll extension for MediaWiki through 1.35.1. The non-admin vote list contains a fu…
-
Unscored —
An issue was discovered in the Widgets extension for MediaWiki through 1.35.1. Any user with the ability to edit pages …
-
Unscored —
An issue was discovered in the PushToWatch extension for MediaWiki through 1.35.1. The primary form did not implement a…
-
Medium 6.8
request smuggling in async-h1
async-h1 is an asynchronous HTTP/1.1 parser for Rust (crates.io). There is a request smuggling vulnerability in async-h1 before version 2.3.0. This vulnerability affects any webserver that uses async-h1 behind a reverse proxy, including all such Tide applicat…
-
Unscored —
MiniWeb HTTP server 0.8.19 allows remote attackers to cause a denial of service (daemon crash) via a long name for the …
-
Medium 6.1
Arbitrary read/write in DBdeployer
DBdeployer is a tool that deploys MySQL database servers easily. In DBdeployer before version 1.58.2, users unpacking a tarball may use a maliciously packaged tarball that contains symlinks to files external to the target. In such scenario, an attacker could …
-
Unscored —
Programi Bilanc Build 007 Release 014 31.01.2020 supplies a .exe file containing several hardcoded credentials to diffe…
-
Unscored —
An issue was discovered in Programi 014 31.01.2020. It has multiple SQL injection vulnerabilities.
-
Unscored —
Philips Hue is vulnerable to a Denial of Service attack. Sending a SYN flood on port tcp/80 will freeze Philips Hue's h…
-
Unscored —CVE-2020-35151 Public exploit
The Online Marriage Registration System 1.0 post parameter "searchdata" in the user/search.php request is vulnerable to…
-
Unscored —
Arbitrary command execution can occur in Webmin through 1.962. Any user authorized for the Package Updates module can e…
-
Unscored —
The Graphics Protocol feature in graphics.c in kitty before 0.19.3 allows remote attackers to execute arbitrary code be…
-
Unscored —
An XXE attack can occur in Kronos WebTA 5.0.4 when SAML is used.
-
Unscored —CVE-2020-21378 Public exploit
SQL injection vulnerability in SeaCMS 10.1 (2020.02.08) via the id parameter in an edit action to admin_members_group.p…
-
Unscored —
SQL injection vulnerability in yunyecms V2.0.1 via the selcart parameter.
-
Medium 6.3
IBM Security Secret Server 10.6 stores potentially sensitive information in config files that could be read by an authe…
-
Low 2.7
IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information when a detailed technical…
-
High 7.4
IBM Security Secret Server 10.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attac…
-
Medium 5.9
IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information, caused by the failure to…
-
Low —
Authenticated Server Side Request Forgery
### Impact Authenticated Server Side Request Forgery ### Patches We recommend to update to the current version 6.3.4.1. You can get the update to 6.3.4.1 regularly via the Auto-Updater or directly via the download overview. https://www.shopware.com/en/downloa…
-
Low —
Information exposure via query strings in URL
### Impact Information exposure via query strings in URL ### Patches We recommend to update to the current version 6.3.4.1. You can get the update to 6.3.4.1 regularly via the Auto-Updater or directly via the download overview. https://www.shopware.com/en/dow…
-
Low —
Authenticated Privilege Escalation
### Impact Authenticated Privilege Escalation ### Patches We recommend to update to the current version 6.3.4.1. You can get the update to 6.3.4.1 regularly via the Auto-Updater or directly via the download overview. https://www.shopware.com/en/download/#shop…
-
Medium 6.1
Open redirect vulnerability
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. In Jupyter Server before version 1.1.1, an open redirect vulnerability could cause the jupyte…
-
Medium 5.9
IBM MQ 9.2 CD and LTS are vulnerable to a denial of service attack caused by an error processing connecting application…
-
Medium 5.4
IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IB…
-
Medium 6.4
IBM FileNet Content Manager and IBM Content Navigator 3.0.CD is vulnerable to stored cross-site scripting. This vulnera…
-
Medium 6.3
IBM Financial Transaction Manager 3.0.6 and 3.1.0 does not invalidate session after logout which could allow an authent…
-
High 7.3
Loopback 8.0.0 contains a vulnerability that could allow an attacker to manipulate or pollute Javascript values and cau…
-
Unscored —
In certain scenarios in Tenable.sc prior to 5.17.0, a scanner could potentially be used outside the user's defined scan…
-
Unscored —CVE-2020-25860 Public exploit
The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnera…
-
Unscored —
ZTE E8810/E8820/E8822 series routers have an information leak vulnerability, which is caused by hard-coded MQTT service…
-
Unscored —
ZTE E8810/E8820/E8822 series routers have an MQTT DoS vulnerability, which is caused by the failure of the device to ve…
-
Low 3.7
Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted …
-
Unscored —
HCL iNotes is susceptible to a Tabnabbing vulnerability caused by improper sanitization of message content. A remote un…
-
Unscored —
Emerson Rosemount X-STREAM Gas AnalyzerX-STREAM enhanced XEGP, XEGK, XEFD, XEXF – all revisions, The affected products …
-
High 7.5
RSA vulnerability in tslite-ng
tlslite-ng is an open source python library that implements SSL and TLS cryptographic protocols. In tlslite-ng before versions 0.7.6 and 0.8.0-alpha39, the code that performs decryption and padding check in RSA PKCS#1 v1.5 decryption is data dependant. In par…
-
High 7.7
Incorrect Session Validation in Apache Airflow
Incorrect Session Validation in Apache Airflow Webserver versions prior to 1.10.14 with default config allows a malicious airflow user on site A where they log in normally, to access unauthorized Airflow Webserver on Site B through the session from Site A. Th…