CVE-2020-5217 Directive injection when using dynamic overrides with user input in RubyGems secure_headers

In Secure Headers RubyGem secureheaders, a directive injection vulnerability is present in versions before 3.8.0, 5.1.0, and 6.2.0. If user-supplied input was passed into append/overridecontentsecuritypolicydirectives, a semicolon could be injected leading to directive injection. This could be us...

PT-2020-18313

Name of the Vulnerable Software and Affected Versions Secure Headers versions prior to 3.8.0 Secure Headers versions prior to 5.1.0 Secure Headers versions prior to 6.2.0 Description A directive injection vulnerability is present in Secure Headers. If user-supplied input was passed into...

CVE-2020-5217: Improper Neutralization of Directives in Dynamically Evaluated Code

In Secure Headers RubyGem secureheaders, a directive injection vulnerability is present in versions before 3.8.0, 5.1.0, and 6.2.0. If user-supplied input was passed into append/overridecontentsecuritypolicydirectives, a semicolon could be injected leading to directive injection. This could be us...

CVE-2020-6840

In mruby 2.1.0, there is a use-after-free in hashslice in mrbgems/mruby-hash-ext/src/hash-ext.c...

PT-2020-19255

Name of the Vulnerable Software and Affected Versions mruby version 2.1.0 Description A use-after-free issue exists in the hash values at function located in mrbgems/mruby-hash-ext/src/hash-ext.c. Recommendations For mruby version 2.1.0, at the moment, there is no information about a newer versio...

PT-2020-19257

Name of the Vulnerable Software and Affected Versions mruby version 2.1.0 Description A use-after-free issue exists in the hash slice function located in mrbgems/mruby-hash-ext/src/hash-ext.c. Recommendations For mruby version 2.1.0, at the moment, there is no information about a newer version th...

PT-2020-10382

Name of the Vulnerable Software and Affected Versions Pandora FMS versions prior to 7.0 NG 742 Description The issue allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ip src parameter in an "index.php?operation/netflow/nf live view" request. This i...

PT-2020-7219

Name of the Vulnerable Software and Affected Versions Condor versions 7.6.x through 7.6.9 Condor versions 7.8.x through 7.8.3 Description The my popenv impl and my spawnv functions in src/condor utils/my popen.cpp and the systemCommand function in condor vm-gahp/vmgahp common.cpp do not properly...

Unrestricted file upload

Gila CMS 1.11.8 allows Unrestricted Upload of a File with a Dangerous Type via .phar or .phtml to the lzld/thumb?src= URI...

PT-2020-18491

Name of the Vulnerable Software and Affected Versions Gila CMS version 1.11.8 Description The issue allows for the unrestricted upload of a file with a dangerous type via .phar or .phtml to the /lzld/thumb?src= API endpoint. This could potentially lead to security risks. Recommendations For Gila...

CVE-2020-5514: Unrestricted Upload of File with Dangerous Type

Gila CMS 1.11.8 allows Unrestricted Upload of a File with a Dangerous Type via .phar or .phtml to the lzld/thumb?src= URI...

OS Command Injection

mikehaertl/php-shellcommand is vulnerable to OS command injection. The addArg function in src/Command.php does not escape all arguments, allowing an attacker to inject arbitrary OS commands...

CVE-2019-13445

An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. parseOptions in tools/rosbag/src/record.cpp has an integer overflow when a crafted split option can be entered on the command line...

CVE-2019-13445: Integer Overflow or Wraparound

An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. parseOptions in tools/rosbag/src/record.cpp has an integer overflow when a crafted split option can be entered on the command line...

WS-2019-0538

open thread in versions thread-reference-20170716 to thread-reference-20191113 is vulnerable to Stack-buffer-overflow, related to src/core/meshcop/commissioner.cpp...

WS-2019-0565

nDPI in versions 2.4 to 3.0 is vulnerable toHeap-buffer-overflow in ndpiintcheckstun, related to src/lib/protocols/stun.c...

WS-2019-0546

nDPI in versions 3.0 is vulnerable to Heap-buffer-overflow in ndpisearchmemcached , related to src/lib/protocols/memcached.c...

Design/Logic Flaw

xlock in OpenBSD 6.6 allows local users to gain the privileges of the auth group by providing a LIBGLDRIVERSPATH environment variable, because xenocara/lib/mesa/src/loader/loader.c mishandles dlopen...

CVE-2011-3350

masqmail 0.2.21 through 0.2.30 improperly calls seteuid in src/log.c and src/masqmail.c that results in improper privilege dropping...

CVE-2011-3350: Improper Check for Dropped Privileges

masqmail 0.2.21 through 0.2.30 improperly calls seteuid in src/log.c and src/masqmail.c that results in improper privilege dropping...