GHSA-G78M-2CHM-R7QV Regular Expression Denial of Service in websocket-extensions (NPM package)

Impact The ReDoS flaw allows an attacker to exhaust the server's capacity to process incoming requests by sending a WebSocket handshake request containing a header of the following form: Sec-WebSocket-Extensions: a; b="\c\c\c\c\c\c\c\c\c\c ... That is, a header containing an unclosed string...

PT-2020-19335 · Elastic · Cloud On Kubernetes

Name of the Vulnerable Software and Affected Versions: Elastic Cloud on Kubernetes ECK versions prior to 1.1.0 Description: The issue concerns a weak random number generator used to generate passwords in Elastic Cloud on Kubernetes ECK. This weakness can be exploited if an attacker determines whe...

Remote Code Execution (RCE)

Overview actionview is a simple, battle-tested conventions and helpers for building web pages. Affected versions of this package are vulnerable to Remote Code Execution RCE. An attacker might be able to control the locals argument of a render call. Note: It doesn't affect applications that don't...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS. Passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. Remediation Upgrade maximebf/debugbar to...

PT-2020-8876 · Re2C +3 · Re2C +3

Name of the Vulnerable Software and Affected Versions: re2c versions prior to 2.0 Description: The issue is related to uncontrolled recursion, which causes stack consumption in the find fixed tags function. This can lead to potential system instability. Recommendations: For versions prior to 2.0,...

PT-2020-13046 · Binance · Tss-Lib

Name of the Vulnerable Software and Affected Versions: Binance tss-lib versions prior to 1.2.0 Description: The keygen protocol implementation in Binance tss-lib allows attackers to generate crafted h1 and h2 parameters, which can compromise a signing round or obtain sensitive information from...

Cross-site Scripting (XSS)

Overview lazysizes is a fast jank-free, SEO-friendly and self-initializing lazyloader for images including responsive images picture/srcset, iframes, scripts/widgets and much more. It also prioritizes resources by differentiating between crucial in view and near view elements to make perceived...

PT-2020-15391 · Jenkins · Jenkins Parasoft Findings Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Parasoft Findings Plugin versions 10.4.3 and earlier Description: The issue allows a user who can control the input files for the Parasoft Findings parser to have Jenkins parse a crafted file that uses external entities for extraction...

UBUNTU-CVE-2020-1944

There is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8.0.5 with a smuggling attack and Transfer-Encoding and Content length headers. Upgrade to versions 7.1.9 and 8.0.6 or later versions...

PT-2020-2347 · Siemens · Sinvr/Sivms Video Server

Name of the Vulnerable Software and Affected Versions: SiNVR/SiVMS Video Server versions prior to V5.0.0 Description: A path traversal vulnerability has been identified in the streaming service of the SiVMS/SiNVR Video Server, which could allow an unauthenticated remote attacker to access and...

Command Injection

Overview compile-sass is a module to compile SASS on-the-fly and/or save it to CSS files. Affected versions of this package are vulnerable to Command Injection. The function setupCleanupOnExitcssPath within dist/index.js is executed as part of the rm command without any sanitization. PoC by JHU...

Command Injection

Overview promise-probe is a FFprobe wrapper. Affected versions of this package are vulnerable to Command Injection via the ffprobefile and createMuteOggoutputFile, options functions. file,outputFile,options can be controlled by users without any sanitization PoC by JHU System Security Lab js var...

PYSEC-2020-155

Waitress version 1.4.2 allows a DOS attack When waitress receives a header that contains invalid characters. When a header like "Bad-header: xxxxxxxxxxxxxxx\x10" is received, it will cause the regular expression engine to catastrophically backtrack causing the process to use 100% CPU time and...

GHSA-HXHM-96PP-2M43 Remote Code Execution in Angular Expressions

Impact The vulnerability, reported by GoSecure Inc, allows Remote Code Execution, if you call expressions.compileuserControlledInput where userControlledInput is text that comes from user input. If running angular-expressions in the browser, an attacker could run any browser script when the...

PT-2019-15356 · Unknown · Control Center Server

Name of the Vulnerable Software and Affected Versions: Control Center Server CCS versions prior to V1.5.0 Description: A remote attacker with network access to the CCS server could exploit an authentication bypass vulnerability in the XML-based communication protocol, as provided by default on...

CSV Injection on node label

Summary CSV Injection, also known as Formula Injection, occurs when websites embed untrusted input inside CSV files. An authenticated malicious user can insert a crafted formula in the node label that can be later executed on another system after another user has downloaded and opened the node li...

SQL Injection

Overview catfan/medoo is a lightweight PHP database framework to accelerate development. Affected versions of this package are vulnerable to SQL Injection. None Remediation Upgrade catfan/medoo to version 1.7.5 or higher. References - GitHub Commit Credit: Snyk Security Research Team...

HTTP Response Splitting

Overview io.ratpack:ratpack-core is a simple, capable, toolkit for creating high performance web applications. Affected versions of this package are vulnerable to HTTP Response Splitting. If untrusted and unsanitized data is used to populate the headers of an HTTP response, an attacker can utiliz...

PT-2019-5726 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.8-68 Description: A flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined...

PT-2019-3610 · Zingbox · Zingbox Inspector

Name of the Vulnerable Software and Affected Versions: Zingbox Inspector versions 1.294 and earlier Description: A security issue exists due to the lack of protection against ARP spoofing, allowing a remote attacker to potentially elevate their privileges. The issue makes the Inspector susceptibl...