Google Play Apps Remain Vulnerable to High-Severity Flaw

UPDATE Researchers are warning that several popular Google Play applications – including mobile browser app Edge – have yet to push out an important update addressing a high-severity vulnerability in the Google Play Core Library. The vulnerability exists in Google Play Core Library, which is...

CVE-2020-29392

The Estil Hill Lock Password Manager Safe app 2.3 for iOS has a 06 backdoor password. An attacker with physical access can unlock the password manager without knowing the master password set by the user...

DEBIAN-CVE-2020-7778

This affects the package systeminformation before 4.30.2. The attacker can overwrite the properties and functions of an object, which can lead to executing OS commands...

Directory traversal in development mode handler in Vaadin 14 and 15-17

Improper URL validation in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.4.1 Vaadin 14.0.0 through 14.4.2, and 3.0 prior to 5.0 Vaadin 15 prior to 18 allows attacker to request arbitrary files stored outside of intended frontend resources folder. See CWE-20: Improper...

alkyne (0.1.0), dioxus-core (0.1.2) +7 more potentially affected by CVE-2020-36456 via toolshed (>=0.4.0, <=0.8.1)

toolshed CARGO version =0.4.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1 - vip-712 0.1.1 Source cves: CVE-2020-36456 Source advisory: OSV:RUSTSEC-2020-0136...

Microsoft Azure Sphere Unsigned Code Execution Vulnerability (CNVD-2021-17731)

Azure Sphere is a secure, advanced application platform with built-in communications and security features for connected devices. An unsigned code execution vulnerability exists in Microsoft Azure Sphere versions prior to 20.08. An attacker could exploit the vulnerability to execute code...

nginx 1.5.10 'ngx_http_spdy_module' RCE Vulnerability

nginx is prone to a remote code execution RCE vulnerability in the ngxhttpspdymodule module. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...

nginx Information Disclosure Vulnerability (CVE-2014-3556)

nginx is prone to an information disclosure vulnerability in the SMTP proxy. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

Security Bulletin: IBM Security Directory Suite vulnerable to information disclosure (CVE-2018-15473)

Summary Security vulnerability that could allow a remote attacker to obtain sensitive information, has been fixed and delivered in IBM Security Directory Suite. Vulnerability Details CVEID: CVE-2018-15473 DESCRIPTION: OpenSSH could allow a remote attacker to obtain sensitive information, caused b...

Western Digital My Cloud Remote Code Execution Vulnerability

Western Digital My Cloud is a personal cloud storage device from Western Digital. A remote code execution vulnerability exists in Western Digital My Cloud Devices prior to version 5.4.1140, which originates from remote code execution due to insufficient user input validation in reg device.php. No...

Prototype Pollution in node-forge

Overview The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the vulnerable functions. Recommendation Upgrade to version 0.10.0 or later. References -...

MetInfo SQL Injection Vulnerability (CNVD-2021-05409)

MetInfo using PHP + Mysql architecture, is a very SEO-friendly, full-featured, support for multi-language, responsive display, extremely suitable for business, corporate website construction cms station-building system. MetInfo 7.0.0 beta version has SQL injection vulnerability. Attackers can...

Mozilla Rust linked-hash-map buffer overflow vulnerability

Rust is a general-purpose, compiled programming language. A buffer overflow vulnerability exists in linked-hash-map in Mozilla Rust versions prior to 0.5.3, which arises from the initialization of a non-null pointer that can be exploited to execute arbitrary code with the help of a maliciously...

@cenk1cenk2/renovate-config (>=1.0.9, <=1.4.15) potentially affected by unknown CVE via renovate (>=21.33.15, <=22.25.6)

renovate NPM version =21.33.15, =1.0.9, =1.4.15 Source cves: unknown CVE Source advisory: OSV:GHSA-36RH-GGPR-J3GJ...

Cross-Site Scripting in swagger-ui

Versions of swagger-ui prior to 2.2.1 are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize JSON schemas, allowing attackers to execute arbitrary JavaScript using tags in the method descriptions. Recommendation Upgrade to version 2.2.1 or later...

Cross-Site Scripting in node-red

Versions of node-red prior to 0.18.6 are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize the name field in new items, allowing attackers to execute arbitrary JavaScript in the victim's browser. Recommendation Upgrade to version 0.18.6 or later...

GHSA-P82G-2XPP-M5R3 Cross-Site Scripting in dojo

Versions of dojo prior to 1.2.0 are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize HTML code in user-controlled input, allowing attackers to execute arbitrary JavaScript in the victim's browser. Recommendation Upgrade to version 1.2.0 or later...

Cross-Site Scripting in atlasboard-atlassian-package

All versions of atlasboard-atlassian-package prior to 0.4.2 are vulnerable to Cross-Site Scripting XSS. The package fails to properly sanitize user input that is rendered as HTML, which may allow attackers to execute arbitrary JavaScript in a victim's browser. This requires attackers being able t...

GHSA-9P2W-RMX4-9MW7 Command Injection in strapi

Versions of strapi before 3.0.0-beta.17.8 are vulnerable to Command Injection. The package fails to sanitize plugin names in the /admin/plugins/install/ route. This may allow an authenticated attacker with admin privileges to run arbitrary commands in the server. Recommendation Upgrade to version...

@draftbit/airtable-graphql (2.0.0), @draftbit/hapi-airtable-authentication-plugin (>=1.0.0, <=1.1.0) +34 more potentially affected by unknown CVE via airtable (>=0.4.5, <=0.6.0)

airtable NPM version =0.4.5, =1.0.0, =0.1.0, =0.0.1, =0.1.0, =1.0.0, =1.0.0, =1.0.3, =0.0.1, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =1.0.0, =1.0.9 and more Source cves: unknown CVE Source advisory: OSV:GHSA-JRJ9-5QP6-2V8Q...