3339 matches found
Vulnerability Detection Pipeline (Beta)
Update October 22, 2020: The Vulnerability Detection Pipeline beta has been updated to include detections of all severities. It now gives visibility into upcoming and recently published detections with severity 3, 2 and 1 in addition to severity 5 and 4. The pipeline also supports a URL parameter...
GHSA-W7RC-RWVF-8Q5R The `size` option isn't honored after following a redirect in node-fetch
Impact Node Fetch did not honor the size option after following a redirect, which means that when a content size was over the limit, a FetchError would never get thrown and the process would end without failure. For most people, this fix will have a little or no impact. However, if you are relyin...
PT-2020-5885 · Openexr +5 · Openexr +5
Name of the Vulnerable Software and Affected Versions: OpenEXR versions prior to 3.0.0-beta Description: The issue is related to a flaw in OpenEXR's Scanline API functionality, which can lead to excessive consumption of memory when a crafted file is processed. This can result in an impact to syst...
Google Fixes High-Severity Chrome Browser Code Execution Bug
The Google Chrome web browser has a high-severity vulnerability that could be used to execute arbitrary code, researchers say. The flaw has been fixed in the Chrome 85 stable channel, set to be rolled out to users this week. The flaw CVE-2020-6492 is a use-after-free vulnerability in the WebGL We...
PT-2020-6481 · Openexr +5 · Openexr +5
Name of the Vulnerable Software and Affected Versions: OpenEXR versions prior to 3.0.0-beta Description: A flaw in the Dwa decompression functionality of OpenEXR's IlmImf library can cause a NULL pointer dereference when processing a crafted input file supplied by an attacker. This could lead to ...
Ubiquiti Networks UniFi Protect Information Disclosure Vulnerability
Ubiquiti Networks UniFi Protect is a network video recorder from Ubiquiti Networks USA. An information disclosure vulnerability exists in Ubiquiti Networks UniFi Protect versions prior to 1.13.4-beta.5. The vulnerability stems from an error in the configuration or other errors in the operation of...
CVE-2020-8213
An information exposure vulnerability exists in UniFi Protect before v1.13.4-beta.5 that allowed unauthenticated attackers access to valid usernames for the UniFi Protect web application via HTTP response code and response timing...
issues.betasystems.com Cross Site Scripting vulnerability OBB-1238437
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-15721
RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php...
CVE-2020-15721
RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php...
GHSA-M93V-9QJC-3G79 Context isolation bypass via leaked cross-context objects in Electron
Impact Apps using contextIsolation are affected. This is a context isolation bypass, meaning that code running in the main world context in the renderer can reach into the isolated Electron context and perform privileged actions. Workarounds There are no app-side workarounds, you must update your...
GHSA-6VRV-94JV-CRRG Context isolation bypass via Promise in Electron
Impact Apps using contextIsolation are affected. This is a context isolation bypass, meaning that code running in the main world context in the renderer can reach into the isolated Electron context and perform privileged actions. Workarounds There are no app-side workarounds, you must update your...
PT-2020-6869 · D Link · D-Link Dir-878 +2
Name of the Vulnerable Software and Affected Versions: D-Link DIR-867-US, DIR-878, DIR-882-US versions 1.20B10 BETA Description: The issue is related to the implementation of the HNAP protocol in the firmware of D-Link routers, which allows an attacker to bypass authentication procedures by...
CVE-2019-20831
An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.5.0.20733. It has void data mishandling, causing a crash...
CVE-2019-20831
An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.5.0.20733. It has void data mishandling, causing a crash...
D-Link DIR-865L Security Feature Issue Vulnerability
The D-Link DIR-865L is a wireless router from AUO D-Link of Taiwan, China. A security feature issue vulnerability exists in the D-Link DIR-865L Ax version 1.20B01 Beta, which stems from the pseudo-random number generator using an easily guessable seed. No details of the vulnerability are provided...
D-Link DIR-865L Encryption Problem Vulnerability
The D-Link DIR-865L is a wireless router from AUO D-Link of Taiwan, China. A vulnerability with encryption issues exists in D-Link DIR-865L Ax version 1.20B01 Beta. A remote attacker can exploit the vulnerability to obtain sensitive information...
D-Link DIR-865L Information Disclosure Vulnerability (CNVD-2020-33169)
The D-Link DIR-865L is a wireless router from AUO D-Link of Taiwan, China. An information disclosure vulnerability exists in D-Link DIR-865L Ax version 1.20B01 Beta, which originates from the program storing sensitive information in plaintext form. An attacker can exploit this vulnerability to...