Archive
10 March 2021
Vulnerabilities first published on this day (UTC), newest first.
102 results · Feed
-
Unscored —
Infinite loop when decoding inputs in encoding/xml
encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader (for xml.NewTokenDecoder) returns EOF in the middle of an element. This can occur in the Decode, DecodeElement, or Skip method.
-
Medium 6.5
Crash in receiving updated SDP answer after initial SDP negotiation failed
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In PJSIP version 2.10 and earlier, after an initial INVITE has been sent, when two 183 res…
-
Medium 6.8
Existing TLS connections can be reused without checking remote hostname
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In version 2.10 and earlier, PJSIP transport can be reused if they have the same IP addres…
-
Medium 5.0
Execution of untrusted code through config file
Tenable for Jira Cloud is an open source project designed to pull Tenable.io vulnerability data, then generate Jira Tasks and sub-tasks based on the vulnerabilities' current state. It published in pypi as "tenable-jira-cloud". In tenable-jira-cloud before ver…
-
Medium 6.3
environment variable leak
In containerd (an industry-standard container runtime) before versions 1.3.10 and 1.4.4, containers launched through containerd's CRI implementation (through Kubernetes, crictl, or any other pod/container client that uses the containerd CRI service) that shar…
-
Medium 6.8
October CMS vulnerable to Potential Host Header Poisoning on misconfigured servers
October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October before version 1.1.2, when running on poorly configured servers (i.e. the server routes any request, regardless of the HOST header to an October CMS instan…
-
Unscored —
The TFTP server fails to handle multiple connections on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices, and allows externa…
-
Unscored —
The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was affected by an authentication issue…
-
Unscored —
Multiple integer overflow parameters were found in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 …
-
Unscored —
The authentication token required to execute NSDP write requests on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices is not …
-
Unscored —
A cross-site scripting (XSS) vulnerability in the administration web panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devic…
-
Medium 5.1
Cortex XSOAR: Secrets for SAML single sign-on (SSO) integration may be logged in system logs
An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on (SSO) integration can be logged to the '/var/log/demisto/' server logs when testing the integration during setup. T…
-
Unscored —
A buffer overflow vulnerability in the access control section on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices (in the ad…
-
Unscored —
NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allow unauthenticated users to modify the switch DHCP configuration by send…
-
Unscored —
The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was not properly validating the length …
-
Unscored —
A buffer overflow vulnerability in the NSDP protocol authentication method on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devic…
-
Unscored —
The CSRF protection mechanism implemented in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 device…
-
Unscored —
The hashing algorithm implemented for NSDP password authentication on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was f…
-
Unscored —
Incorrect Access Control in Emerson Smart Wireless Gateway 1420 4.6.59 allows remote attackers to obtain sensitive devi…
-
Unscored —
Emerson Smart Wireless Gateway 1420 4.6.59 allows non-privileged users (such as the default account 'maint') to perform…
-
High 7.8
Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
-
Unscored —
Libjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability caused by a divide by zero …
-
Unscored —
In GenerateFaceMask of face.cc, there is a possible out of bounds write due to an incorrect bounds check. This could le…
-
Unscored —
In sound_trigger_event_alloc of platform.h, there is a possible out of bounds write due to a heap buffer overflow. This…
-
Unscored —
In convertToHidl of convert.cpp, there is a possible out of bounds read due to uninitialized data from ReturnFrameworkM…
-
Unscored —
In the NXP NFC firmware, there is a possible insecure firmware update due to a logic error. This could lead to local es…
-
Unscored —
In iaxxx_core_sensor_change_state of iaxxx-module.c, there is a possible out of bounds write due to a missing bounds ch…
-
Unscored —
In the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer overflow. This could le…
-
Unscored —
In fts_driver_test_write of fts_proc.c, there is a possible out of bounds read due to a missing bounds check. This coul…
-
Unscored —
In the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer overflow. This could le…
-
Unscored —
In the FingerTipS touch screen driver, there is a possible out of bounds write due to a heap buffer overflow. This coul…
-
Unscored —
In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to…
-
Unscored —
In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to…
-
Unscored —
In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to…
-
Unscored —
In the Titan-M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead…
-
Unscored —
In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead…
-
Unscored —
In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead…
-
Unscored —
In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead…
-
Unscored —
In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead…
-
Unscored —
In setNightModeActivated of UiModeManagerService.java, there is a missing permission check. This could lead to local es…