Archive
30 June 2021
Vulnerabilities first published on this day (UTC), newest first.
12 results · Clear filters · Feed
-
High 7.5
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in think-helper
think-helper defines a set of helper functions for ThinkJS. In versions of think-helper prior to 1.1.3, the software receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not proper…
-
High 7.5
Session fixation vulnerability in Jenkins
Jenkins 2.299 and earlier, LTS 2.289.1 and earlier does not invalidate the previous session on login.
-
High 7.5
XML2Dict XML Entity Expansion Vulnerability
XXE vulnerability in 'XML2Dict' version 0.2.2 allows an attacker to cause a denial of service.
-
High 7.0
Bootloader contains a vulnerability in NVIDIA MB2 where potential heap overflow might cause corruption of the heap meta…
-
High 7.7
Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 10 is missing. The length of an…
-
High 7.7
Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 11 is missing. Improper restric…
-
High 7.7
Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 9 is missing. Improper restrict…
-
High 7.7
Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 5 is missing. Improper restrict…
-
High 7.7
Trusty contains a vulnerability in all trusted applications (TAs) where the stack cookie was not randomized, which migh…
-
High 7.7
Trusty contains a vulnerability in command handlers where the length of input buffers is not verified. This vulnerabili…
-
High 7.9
Trusty trusted Linux kernel (TLK) contains a vulnerability in the NVIDIA TLK kernel where a lack of heap hardening coul…
-
High 7.8
arpwatch: Local privilege escalation from runtime user to root
A UNIX Symbolic Link (Symlink) Following vulnerability in arpwatch of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Factory, Leap 15.2 allows local attackers with control of the runtime user to run…