🚨 CVE-2020-13959
The default error page for VelocityView in Apache Velocity Tools prior to 3.1 reflects back the vm file that was entered as part of the URL. An attacker can set an XSS payload file as this vm file in the URL which results in this payload being executed. XSS vulnerabilities allow attackers to execute arbitrary JavaScript in the context of the attacked website and the attacked user. This can be abused to steal session cookies, perform requests in the name of the victim or for phishing attacks.
🎖@cveNotify
The default error page for VelocityView in Apache Velocity Tools prior to 3.1 reflects back the vm file that was entered as part of the URL. An attacker can set an XSS payload file as this vm file in the URL which results in this payload being executed. XSS vulnerabilities allow attackers to execute arbitrary JavaScript in the context of the attacked website and the attacked user. This can be abused to steal session cookies, perform requests in the name of the victim or for phishing attacks.
🎖@cveNotify
🚨 CVE-2020-13936
An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/modify velocity templates running Apache Velocity Engine versions up to 2.2.
🎖@cveNotify
An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/modify velocity templates running Apache Velocity Engine versions up to 2.2.
🎖@cveNotify
🚨 CVE-2020-36277
Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in pixconv.c.
🎖@cveNotify
Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in pixconv.c.
🎖@cveNotify
GitHub
Comparing 1.79.0...1.80.0 · DanBloomberg/leptonica
Leptonica is an open source library containing software that is broadly useful for image processing and image analysis applications. The official github repository for Leptonica is: danbloomberg/le...
🚨 CVE-2020-36280
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.
🎖@cveNotify
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.
🎖@cveNotify
GitHub
Comparing 1.79.0...1.80.0 · DanBloomberg/leptonica
Leptonica is an open source library containing software that is broadly useful for image processing and image analysis applications. The official github repository for Leptonica is: danbloomberg/le...
🚨 CVE-2020-36278
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.
🎖@cveNotify
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.
🎖@cveNotify
GitHub
Comparing 1.79.0...1.80.0 · DanBloomberg/leptonica
Leptonica is an open source library containing software that is broadly useful for image processing and image analysis applications. The official github repository for Leptonica is: danbloomberg/le...
🚨 CVE-2020-36279
Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adaptmap.c.
🎖@cveNotify
Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adaptmap.c.
🎖@cveNotify
GitHub
Comparing 1.79.0...1.80.0 · DanBloomberg/leptonica
Leptonica is an open source library containing software that is broadly useful for image processing and image analysis applications. The official github repository for Leptonica is: danbloomberg/le...
🚨 CVE-2020-36281
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c.
🎖@cveNotify
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c.
🎖@cveNotify
GitHub
Comparing 1.79.0...1.80.0 · DanBloomberg/leptonica
Leptonica is an open source library containing software that is broadly useful for image processing and image analysis applications. The official github repository for Leptonica is: danbloomberg/le...
🚨 CVE-2015-5349
The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute arbitrary commands by leveraging a crafted LDAP entry that is interpreted as a formula when imported into a spreadsheet.
🎖@cveNotify
The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute arbitrary commands by leveraging a crafted LDAP entry that is interpreted as a formula when imported into a spreadsheet.
🎖@cveNotify
🚨 CVE-2021-37436
Amazon Echo Dot devices through 2021-07-02 sometimes allow attackers, who have physical access to a device after a factory reset, to obtain sensitive information via a series of complex hardware and software attacks. NOTE: reportedly, there were vendor marketing statements about safely removing personal content via a factory reset. Also, the vendor has reportedly indicated that they are working on mitigations.
🎖@cveNotify
Amazon Echo Dot devices through 2021-07-02 sometimes allow attackers, who have physical access to a device after a factory reset, to obtain sensitive information via a series of complex hardware and software attacks. NOTE: reportedly, there were vendor marketing statements about safely removing personal content via a factory reset. Also, the vendor has reportedly indicated that they are working on mitigations.
🎖@cveNotify
Ars Technica
Thinking about selling your Echo Dot—or any IoT device? Read this first
Deleting data from Echo Dots—and other IoT devices from Amazon and elsewhere—is hard.
🚨 CVE-2021-36740
Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request. This affects Varnish Enterprise 6.0.x before 6.0.8r3, and Varnish Cache 5.x and 6.x before 6.5.2, 6.6.x before 6.6.1, and 6.0 LTS before 6.0.8.
🎖@cveNotify
Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request. This affects Varnish Enterprise 6.0.x before 6.0.8r3, and Varnish Cache 5.x and 6.x before 6.5.2, 6.6.x before 6.6.1, and 6.0 LTS before 6.0.8.
🎖@cveNotify
GitHub
Take content length into account on H/2 request bodies · varnishcache/varnish-cache@82b0a62
When receiving H/2 data frames, make sure to take the advertised content
length into account, and fail appropriately if the combined sum of the
data frames does not match the content length.
length into account, and fail appropriately if the combined sum of the
data frames does not match the content length.
🚨 CVE-2021-23413
This affects the package jszip before 3.7.0.
Crafting a new zip file with filenames set to Object prototype values (e.g __proto__, toString, etc) results in a returned object with a modified prototype instance.
🎖@cveNotify
This affects the package jszip before 3.7.0.
Crafting a new zip file with filenames set to Object prototype values (e.g __proto__, toString, etc) results in a returned object with a modified prototype instance.
🎖@cveNotify
GitHub
fix: Use a null prototype object for this.files by MichaelAquilina · Pull Request #766 · Stuk/jszip
This approach is taken to prevent overriding object methods that would exist on a normal object Object.create({})
🚨 CVE-2021-3663
firefly-iii is vulnerable to Improper Restriction of Excessive Authentication Attempts
🎖@cveNotify
firefly-iii is vulnerable to Improper Restriction of Excessive Authentication Attempts
🎖@cveNotify
🚨 CVE-2020-28020
Exim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in which an unauthenticated remote attacker can execute arbitrary code by leveraging the mishandling of continuation lines during header-length restriction.
🎖@cveNotify
Exim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in which an unauthenticated remote attacker can execute arbitrary code by leveraging the mishandling of continuation lines during header-length restriction.
🎖@cveNotify
🚨 CVE-2021-37460
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /planprop?id= (reflected).
🎖@cveNotify
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /planprop?id= (reflected).
🎖@cveNotify
www.nch.com.au
Axon Virtual VoIP PBX & SIP Server Software for Businesses
Axon Virtual SIP-enabled PBX Software works as a full featured telephone switch for small business and call center environments for analog or VoIP.
🚨 CVE-2021-37459
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field (stored).
🎖@cveNotify
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field (stored).
🎖@cveNotify
www.nch.com.au
Axon Virtual VoIP PBX & SIP Server Software for Businesses
Axon Virtual SIP-enabled PBX Software works as a full featured telephone switch for small business and call center environments for analog or VoIP.
🚨 CVE-2021-37458
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field (stored).
🎖@cveNotify
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field (stored).
🎖@cveNotify
www.nch.com.au
Axon Virtual VoIP PBX & SIP Server Software for Businesses
Axon Virtual SIP-enabled PBX Software works as a full featured telephone switch for small business and call center environments for analog or VoIP.
🚨 CVE-2021-37457
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the SipRule field (stored).
🎖@cveNotify
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the SipRule field (stored).
🎖@cveNotify
www.nch.com.au
Axon Virtual VoIP PBX & SIP Server Software for Businesses
Axon Virtual SIP-enabled PBX Software works as a full featured telephone switch for small business and call center environments for analog or VoIP.
🚨 CVE-2021-37456
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address (stored).
🎖@cveNotify
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address (stored).
🎖@cveNotify
www.nch.com.au
Axon Virtual VoIP PBX & SIP Server Software for Businesses
Axon Virtual SIP-enabled PBX Software works as a full featured telephone switch for small business and call center environments for analog or VoIP.
🚨 CVE-2021-37455
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the outbound dialing plan (stored).
🎖@cveNotify
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the outbound dialing plan (stored).
🎖@cveNotify
www.nch.com.au
Axon Virtual VoIP PBX & SIP Server Software for Businesses
Axon Virtual SIP-enabled PBX Software works as a full featured telephone switch for small business and call center environments for analog or VoIP.
🚨 CVE-2021-37454
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the line name (stored).
🎖@cveNotify
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the line name (stored).
🎖@cveNotify
www.nch.com.au
Axon Virtual VoIP PBX & SIP Server Software for Businesses
Axon Virtual SIP-enabled PBX Software works as a full featured telephone switch for small business and call center environments for analog or VoIP.
🚨 CVE-2021-37453
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the extension name (stored).
🎖@cveNotify
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the extension name (stored).
🎖@cveNotify
www.nch.com.au
Axon Virtual VoIP PBX & SIP Server Software for Businesses
Axon Virtual SIP-enabled PBX Software works as a full featured telephone switch for small business and call center environments for analog or VoIP.