Archive
21 December 2020
Vulnerabilities first published on this day (UTC), newest first.
9 results · Clear filters · Feed
-
Medium 6.8
request smuggling in async-h1
async-h1 is an asynchronous HTTP/1.1 parser for Rust (crates.io). There is a request smuggling vulnerability in async-h1 before version 2.3.0. This vulnerability affects any webserver that uses async-h1 behind a reverse proxy, including all such Tide applicat…
-
Medium 6.1
Arbitrary read/write in DBdeployer
DBdeployer is a tool that deploys MySQL database servers easily. In DBdeployer before version 1.58.2, users unpacking a tarball may use a maliciously packaged tarball that contains symlinks to files external to the target. In such scenario, an attacker could …
-
Medium 6.3
IBM Security Secret Server 10.6 stores potentially sensitive information in config files that could be read by an authe…
-
Medium 5.9
IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information, caused by the failure to…
-
Medium 6.1
Open redirect vulnerability
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. In Jupyter Server before version 1.1.1, an open redirect vulnerability could cause the jupyte…
-
Medium 5.9
IBM MQ 9.2 CD and LTS are vulnerable to a denial of service attack caused by an error processing connecting application…
-
Medium 5.4
IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IB…
-
Medium 6.4
IBM FileNet Content Manager and IBM Content Navigator 3.0.CD is vulnerable to stored cross-site scripting. This vulnera…
-
Medium 6.3
IBM Financial Transaction Manager 3.0.6 and 3.1.0 does not invalidate session after logout which could allow an authent…