Archive
12 January 2021
Vulnerabilities first published on this day (UTC), newest first.
178 results · Feed
-
Unscored —
The "Test Connection" available in v7.x of the Red Hat Single Sign On application console can permit an authorized user…
-
Unscored —
An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code injection issue via the haw…
-
Medium 6.5
In CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoint…
-
Unscored —
REDCap 10.3.4 contains a XSS vulnerability in the ToDoList function with parameter sort. The information submitted by t…
-
Unscored —
REDCap 10.3.4 contains a SQL injection vulnerability in the ToDoList function via sort parameter. The application uses …
-
Critical 9.8
Unauthenticated remote code execution in Ignition
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of file_get_contents() and file_put_contents(). This is exploitable on sites using debug mode with Larave…
KEV Sep 18, 2023 -
Unscored —
selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and e…
-
Medium 5.4
Pillow Out-of-bounds Read
In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled.
-
High 8.8
Pillow Out-of-bounds Write
In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.
-
High 7.1
Pillow Out-of-bounds Read
In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations.
-
Unscored —CVE-2020-24701 Scanner template
OX App Suite through 7.10.4 allows XSS via the app loading mechanism (the PATH_INFO to the /appsuite URI).
-
Unscored —
OX App Suite through 7.10.3 allows SSRF because GET requests are sent to arbitrary domain names with an initial autocon…
-
Unscored —
SaferVPN for Windows Ver 5.0.3.3 through 5.0.4.15 could allow local privilege escalation from low privileged users to S…
-
Unscored —
Espressif ESP-IDF 2.x, 3.0.x through 3.0.9, 3.1.x through 3.1.7, 3.2.x through 3.2.3, 3.3.x through 3.3.2, and 4.0.x th…
-
Unscored —
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5)…
-
Unscored —
A vulnerability has been identified in SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch f…
-
Unscored —
The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead t…
-
Unscored —
The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existe…