Archive
28 December 2020
Vulnerabilities first published on this day (UTC), newest first.
45 results · Feed
-
High 8.7
Stored XSS in mermaid diagrams
HedgeDoc is a collaborative platform for writing and sharing markdown. In HedgeDoc before version 1.7.1 an attacker can inject arbitrary `script` tags in HedgeDoc notes using mermaid diagrams. Our content security policy prevents loading scripts from most loc…
-
High 7.5
Arbitary file upload
HedgeDoc is a collaborative platform for writing and sharing markdown. In HedgeDoc before version 1.7.1 an unauthenticated attacker can upload arbitrary files to the upload storage backend including HTML, JS and PHP files. The problem is patched in HedgeDoc 1…
-
Unscored —
NCH Express Invoice 8.06 to 8.24 is vulnerable to Reflected XSS in the Quotes List module.
-
Unscored —
In NCH Express Accounts 8.24 and earlier, an authenticated low-privilege user can enter a crafted URL to access higher-…
-
Unscored —
NCH Express Accounts 8.24 and earlier allows local users to discover the cleartext password by reading the configuratio…
-
Unscored —
An issue was discovered in G-Data before 25.5.9.25 using Symbolic links, it is possible to abuse the infected-file rest…
-
Unscored —CVE-2020-35613 EPSS 29%
[20201104] - Core - SQL injection in com_users list view
An issue was discovered in Joomla! 3.0.0 through 3.9.22. Improper filter blacklist configuration leads to a SQL injection vulnerability in the backend user list.
-
Unscored —
[20201107] - Core - Write ACL violation in multiple core views
An issue was discovered in Joomla! 1.7.0 through 3.9.22. Lack of input validation while handling ACL rulesets can cause write ACL violations.
-
Unscored —
[20201105] - Core - User Enumeration in backend login
An issue was discovered in Joomla! 3.9.0 through 3.9.22. Improper handling of the username leads to a user enumeration attack vector in the backend login page.
-
Unscored —
[20201106] - Core - CSRF in com_privacy emailexport feature
An issue was discovered in Joomla! 2.5.0 through 3.9.22. A missing token check in the emailexport feature of com_privacy causes a CSRF vulnerability.
-
Unscored —
[20201103] - Core - Path traversal in mod_random_image
An issue was discovered in Joomla! 2.5.0 through 3.9.22. The folder parameter of mod_random_image lacked input validation, leading to a path traversal vulnerability.
-
Unscored —
[20201101] - Core - com_finder ignores access levels on autosuggest
An issue was discovered in Joomla! 2.5.0 through 3.9.22. The autosuggestion feature of com_finder did not respect the access level of the corresponding terms.
-
Unscored —
[20201102] - Core - Disclosure of secrets in Global Configuration page
An issue was discovered in Joomla! 2.5.0 through 3.9.22. The globlal configuration page does not remove secrets from the HTML output, disclosing the current values.
-
Medium 6.1
An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attac…
KEV Jun 22, 2023 -
Unscored —
An incorrect permission assignment during the installation script of TeamworkCloud 18.0 thru 19.0 allows a local unpriv…
-
Unscored —
The test suite in libopendkim in OpenDKIM through 2.10.3 allows local users to gain privileges via a symlink attack aga…
-
Critical 9.3
Critical security issues in XML encoding in Dex
Dex is a federated OpenID Connect provider written in Go. In Dex before version 2.27.0 there is a critical set of vulnerabilities which impacts users leveraging the SAML connector. The vulnerabilities enables potential signature bypass due to issues with XML …
-
Unscored —
HCL Domino is susceptible to a Denial of Service (DoS) vulnerability due to insufficient validation of input to its pub…
-
High 7.5
Regular expression Denial of Service in date-and-time
date-and-time is an npm package for manipulating date and time. In date-and-time before version 0.14.2, there a regular expression involved in parsing which can be exploited to to cause a denial of service. This is fixed in version 0.14.2.
-
Unscored —
A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it po…
-
Unscored —
In Arista EOS malformed packets can be incorrectly forwarded across VLAN boundaries in one direction. This vulnerabilit…
-
Unscored —
An issue with ARP packets in Arista’s EOS affecting the 7800R3, 7500R3, and 7280R3 series of products may result in iss…
-
Unscored —
In EVPN VxLAN setups in Arista EOS, specific malformed packets can lead to incorrect MAC to IP bindings and as a result…
-
Unscored —
Ultimate WooCommerce Gift Cards 3.0.2 is affected by a file upload vulnerability in the Custom GiftCard Template that c…
-
Unscored —
An issue was discovered in Zammad before 3.4.1. Admin Users without a ticket.* permission can access Tickets.
-
Unscored —
An issue was discovered in Zammad before 3.4.1. There are wrong authorization checks for impersonation requests via X-O…
-
Unscored —
An issue was discovered in Zammad before 3.4.1. There is an authentication bypass in the SSO endpoint via a crafted hea…
-
Unscored —
An issue was discovered in Zammad before 3.4.1. The global-search feature leaks Knowledge Base drafts to Knowledge Base…
-
Unscored —
An SSRF issue was discovered in Zammad before 3.4.1. The SMS configuration interface for Massenversand is implemented i…
-
Unscored —
An issue was discovered in Zammad before 3.4.1. The Tag and Link REST API endpoints (for add and delete) lack a CSRF to…
-
Unscored —
An account-enumeration issue was discovered in Zammad before 3.4.1. The Create User functionality is implemented in a w…
-
Unscored —
An issue was discovered in Zammad before 3.4.1. There is Stored XSS via a Tags element in a TIcket.
-
Unscored —
An issue was discovered in Zammad before 3.5.1. An Agent with Customer permissions in a Group can bypass intended acces…
-
Unscored —
An issue was discovered in Zammad before 3.5.1. The default signup Role (for newly created Users) can be a privileged R…
-
Unscored —
An issue was discovered in Zammad before 3.5.1. A REST API call allows an attacker to change Ticket Article data in a w…
-
Unscored —
dhowden tag before 2020-11-19 allows "panic: runtime error: slice bounds out of range" via readAtomData.
-
Unscored —
dhowden tag before 2020-11-19 allows "panic: runtime error: slice bounds out of range" via readTextWithDescrFrame.
-
Unscored —
dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readAPICFrame.
-
Medium 6.5
dhowden tag panic due to out-of-bounds read
dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readPICFrame.
-
Unscored —
Panasonic Security System WV-S2231L 4.25 allows a denial of service of the admin control panel (which will require a ph…