Input validation

An issue was discovered in xdLocalStorage through 2.0.5. The receiveMessage function in xdLocalStoragePostMessageApi.js does not implement any validation of the origin of web messages. Remote attackers who can entice a user to load a malicious site can exploit this issue to impact the...

CVE-2015-9544

CVE-2015-9544 affects xdLocalStorage up to version 2.0.5. The postMessage API (xdLocalStoragePostMessageApi.js) does not validate the origin of received web messages, enabling remote attackers who lure a user to a malicious site to read/alter data in local storage of the vulnerable site. Impact s...

CVE-2015-9545

An issue was discovered in xdLocalStorage through 2.0.5. The receiveMessage function in xdLocalStorage.js does not implement any validation of the origin of web messages. Remote attackers who can entice a user to load a malicious site can exploit this issue to impact the confidentiality and...

CVE-2015-9545

The CVE-2015-9545 issue affects xdLocalStorage up to version 2.0.5, where receiveMessage() in xdLocalStorage.js does not validate the origin of web messages. This missing origin validation can allow remote attackers to entice a user to load a malicious site and exploit web messages to affect the ...

CVE-2019-10747

A flaw was found in nodejs-set-value. The function mixin-deep can be tricked into adding or modifying properties of Object.prototype using any of the constructor, prototype, or proto payloads. The highest threat from this vulnerability is to data confidentiality and integrity...

Mozilla: Use-after-free while running the nsDocShell destructor

A flaw was found in Mozilla Firefox. A race condition can occur while running the nsDocShell destructor causing a use-after-free memory issue. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2020-8112

A heap-based buffer overflow flaw was found in the opjt1clbldecodeprocessor in openjpeg2. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2020-11113

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Mitigation The following conditions a...

The vulnerability of the Border Gateway Protocol (BGP) implementation in the Cisco NX-OS operating system allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the Border Gateway Protocol BGP implementation in the Cisco NX-OS operating system is related to the use of pre-installed configuration data. Exploiting this vulnerability could allow a malicious actor to compromise the integrity and accessibility of protected information...

The vulnerability of the `ieee802154_create` function in the `net/ieee802154/socket.c` module of the AF_IEEE802154 kernel of the Linux operating system, related to default access rights settings, allows an attacker to compromise data integrity.

The vulnerability of the ieee802154create function in the net/ieee802154/socket.c module of the AFIEEE802154 module in the Linux kernel is related to a lack of mechanisms for standard permissions. Exploiting this vulnerability could allow unauthorized access to data integrity...

The vulnerability of the soup_ntlm_parse_challenge() function in the libsoup library allows a attacker to compromise the integrity, confidentiality, and accessibility of the protected information.

The vulnerability of the soupntlmparsechallenge function in the libsoup library arises due to an out-of-buffer operation in memory. Exploiting this vulnerability could allow a remote attacker to compromise the integrity, confidentiality, and accessibility of the protected information...

The vulnerability of the ax25_create function in the net/ax25/af_ax25.c module of the AF_AX25 kernel of the Linux operating system, related to default access rights settings, allows an attacker to compromise data integrity.

The vulnerability of the ax25create function in the net/ax25/afax25.c module of the AFAX25 kernel of the Linux operating system is related to a lack of mechanisms for standard permissions. Exploiting this vulnerability allows an attacker to compromise data integrity...

PT-2020-6261

Name of the Vulnerable Software and Affected Versions Ceph Object Gateway affected versions not specified Description The issue is related to the Ceph Object Gateway, which supports requests from anonymous users in Amazon S3. This could lead to potential XSS attacks due to the lack of proper...

The vulnerability of the IPv4 protocol in real-time operating systems like Wind River VxWorks allows attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the IPv4 protocol for real-time operating systems developed by Wind River VxWorks is related to insufficient access control mechanisms, such as ipdhcpc and DHCP. Exploiting this vulnerability could allow attackers to compromise the integrity and accessibility of protected...

The vulnerability of the atalk_create function in the net/appletalk/ddp.c module of the AF_APPLETALK module, within the Linux operating system’s kernel, relates to default access rights settings. This vulnerability allows an attacker to compromise data integrity.

The vulnerability of the atalkcreate function in the net/appletalk/ddp.c module of the AFAPPLETALK module is related to the lack of a standard permission mechanism. Exploiting this vulnerability could allow an attacker to compromise data integrity...

WHO COVID-19 Mobile App: Improper Input Validation on User's Location on PUT /WhoService/putLocation Could Affect Availability/Falsify Users

Summary: Note: I noticed that that the team has fixed issues like an XSS that's caused only from a header value typically OOS since it's not directly exploitable https://github.com/WorldHealthOrganization/app/pull/855, so in the spirit of this I'm also reporting another "good-to-fix" issue. On th...

CVE-2019-1003024

A flaw was found in the Jenkins script security sandbox. The previously implemented script security sandbox protections prohibiting the use of unsafe AST transforming annotations such as @Grab could be circumvented through use of various Groovy language features including the use of...

CVE-2018-20834

A flaw was found in nodejs-tar in versions prior to 4.4.2. An arbitrary file overwrite can occur when extracting tarballs containing a hard-link to a file that already exists in the system. Further, a file that matches the hard-link may overwrite the system's files with the contents of the...

kernel: buffer-overflow hardening in WiFi beacon validation code.

A flaw in the Linux kernel's WiFi beacon validation code was discovered. The code does not check the length of the variable length elements in the beacon head potentially leading to a buffer overflow. System availability, as well as data confidentiality and integrity, can be impacted by this...

kernel: buffer-overflow hardening in WiFi beacon validation code.

A flaw in the Linux kernel's WiFi beacon validation code was discovered. The code does not check the length of the variable length elements in the beacon head potentially leading to a buffer overflow. System availability, as well as data confidentiality and integrity, can be impacted by this...