Archive
9 March 2021
Vulnerabilities first published on this day (UTC), newest first.
90 results · Feed
-
Unscored —
Web Based Quiz System 1.0 is affected by cross-site scripting (XSS) in admin.php through the options parameter.
-
Medium 5.3
Sensitive information disclosure via log in com.bmuschko:gradle-vagrant-plugin
The `com.bmuschko:gradle-vagrant-plugin` Gradle plugin contains an information disclosure vulnerability due to the logging of the system environment variables. When this Gradle plugin is executed in public CI/CD, this can lead to sensitive credentials being e…
-
Medium 5.3
Exposure of Sensitive Information to an Unauthorized Actor in Products.GenericSetup
Products.GenericSetup is a mini-framework for expressing the configured state of a Zope Site as a set of filesystem artifacts. In Products.GenericSetup before version 2.1.1 there is an information disclosure vulnerability - anonymous visitors may view log and…
-
Medium 5.6
react-dev-utils OS Command Injection in function `getProcessForPort`
react-dev-utils prior to v11.0.4 exposes a function, getProcessForPort, where an input argument is concatenated into a command string to be executed. This function is typically used from react-scripts (in Create React App projects), where the usage is safe. O…
-
High 8.0
malicious repositories can execute remote code while cloning
Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as well as files using a clean/smudge filter such as Git LFS, may cause just-checked out script to be executed w…
-
Unscored —
A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by Ima…
-
Unscored —
A flaw was found in ImageMagick in MagickCore/resample.c. An attacker who submits a crafted file that is processed by I…
-
Unscored —
A flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is processed by ImageMagic…
-
Unscored —
A flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted file that is processe…
-
Unscored —
A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagi…