Skip to content
OpenAdvisories

Archive

28 September 2021

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Medium 4.4

    File reference keys leads to incorrect hashes on HMAC algorithms

    JWT is a library to work with JSON Web Token and JSON Web Signature. Prior to versions 3.4.6, 4.0.4, and 4.1.5, users of HMAC-based algorithms (HS256, HS384, and HS512) combined with `Lcobucci\JWT\Signer\Key\LocalFileReference` as key are having their tokens …

  • Medium 5.7

    Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated ma…

  • Medium 5.7

    Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated ma…

  • Medium 6.8

    Dell NetWorker, versions 18.x and 19.x contain an Information disclosure vulnerability. A NetWorker server user with re…

  • Medium 6.8

    Dell NetWorker, versions 18.x and 19.x contain a Path traversal vulnerability. A NetWorker server user with remote acce…

  • Medium 5.4

    Denial of Service Vulnerability in Web Interface of F-Secure Internet Gatekeeper

    A denial-of-service (DoS) vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. The vulnerability occurs because of an attacker can trigger assertion via malformed HTTP packet to web interface. An unauthenticated attacker cou…