Archive
21 December 2020
Vulnerabilities first published on this day (UTC), newest first.
5 results · Clear filters · Feed
-
High 7.7
Hugo can execute a binary from the current directory on Windows
Hugo is a fast and Flexible Static Site Generator built in Go. Hugo depends on Go's `os/exec` for certain features, e.g. for rendering of Pandoc documents if these binaries are found in the system `%PATH%` on Windows. In Hugo before version 0.79.1, if a malic…
-
High 7.4
IBM Security Secret Server 10.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attac…
-
High 7.3
Loopback 8.0.0 contains a vulnerability that could allow an attacker to manipulate or pollute Javascript values and cau…
-
High 7.5
RSA vulnerability in tslite-ng
tlslite-ng is an open source python library that implements SSL and TLS cryptographic protocols. In tlslite-ng before versions 0.7.6 and 0.8.0-alpha39, the code that performs decryption and padding check in RSA PKCS#1 v1.5 decryption is data dependant. In par…
-
High 7.7
Incorrect Session Validation in Apache Airflow
Incorrect Session Validation in Apache Airflow Webserver versions prior to 1.10.14 with default config allows a malicious airflow user on site A where they log in normally, to access unauthorized Airflow Webserver on Site B through the session from Site A. Th…