Weekly Update: a new vulnerability is published on the National Vulnerability Database (42 items)

New vulnerabilities from the NVD: CVE-2020-15078 OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks. Published at: April 26, 2021 at 05:15PM View on website April 26, 2021 at 07:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-17517 The S3 buckets and keys in a secure Apache Ozone Cluster must be inaccessible to anonymous access by default. The current security vulnerability allows access to keys and buckets through a curl command or an unauthenticated HTTP request. This enables unauthorized access to buckets and keys thereby exposing data to anonymous clients or users. This affected Apache Ozone prior to the 1.1.0 release. Improper Authorization vulnerability in __COMPONENT__ of Apache Ozone allows an attacker to __IMPACT__. This issue affects Apache Ozone Apache Ozone version 1.0.0 and prior versions. Published at: April 27, 2021 at 12:15PM View on website April 27, 2021 at 01:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-25042 Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdata_copy. Published at: April 27, 2021 at 09:15AM View on website April 27, 2021 at 01:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-25041 Unbound before 1.9.5 allows an assertion failure via a compressed name in dname_pkt_copy. Published at: April 27, 2021 at 09:15AM View on website April 27, 2021 at 01:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-25040 Unbound before 1.9.5 allows an infinite loop via a compressed name in dname_pkt_copy. Published at: April 27, 2021 at 09:15AM View on website April 27, 2021 at 01:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-25039 Unbound before 1.9.5 allows an integer overflow in a size calculation in respip/respip.c. Published at: April 27, 2021 at 09:15AM View on website April 27, 2021 at 01:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-25038 Unbound before 1.9.5 allows an integer overflow in a size calculation in dnscrypt/dnscrypt.c. Published at: April 27, 2021 at 09:15AM View on website April 27, 2021 at 01:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-25037 Unbound before 1.9.5 allows an assertion failure and denial of service in dname_pkt_copy via an invalid packet. Published at: April 27, 2021 at 09:15AM View on website April 27, 2021 at 01:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-25036 Unbound before 1.9.5 allows an assertion failure and denial of service in synth_cname. Published at: April 27, 2021 at 09:15AM View on website April 27, 2021 at 01:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-25035 Unbound before 1.9.5 allows an out-of-bounds write in sldns_bget_token_par. Published at: April 27, 2021 at 09:15AM View on website April 27, 2021 at 01:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-25034 Unbound before 1.9.5 allows an integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write. Published at: April 27, 2021 at 09:15AM View on website April 27, 2021 at 01:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-25033 Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGN_UP macro. Published at: April 27, 2021 at 09:15AM View on website April 27, 2021 at 01:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-25032 Unbound before 1.9.5 allows an integer overflow in the regional allocator via regional_alloc. Published at: April 27, 2021 at 09:15AM View on website April 27, 2021 at 01:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-25031 Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. Published at: April 27, 2021 at 09:15AM View on website April 27, 2021 at 01:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-35542 Unisys Data Exchange Management Studio through 5.0.34 doesn't sanitize the input to a HTML document field. This could be used for an XSS attack. Published at: April 27, 2021 at 02:15PM View on website April 27, 2021 at 03:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-22001 HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using the X-Forwarded-For header with the local (loopback) IP address value allowing remote control of the smart home solution. Published at: April 27, 2021 at 09:15PM View on website April 27, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-22000 HomeAutomation 3.3.2 suffers from an authenticated OS command execution vulnerability using custom command v0.1 plugin. This can be exploited with a CSRF vulnerability to execute arbitrary shell commands as the web user via the 'set_command_on' and 'set_command_off' POST parameters in '/system/systemplugins/customcommand/customcommand.plugin.php' by using an unsanitized PHP exec() function. Published at: April 27, 2021 at 09:15PM View on website April 27, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-21998 In HomeAutomation 3.3.2 input passed via the 'redirect' GET parameter in 'api.php' script is not properly verified before being used to redirect users. This can be exploited to redirect a user to an arbitrary website e.g. when a user clicks a specially crafted link to the affected script hosted on a trusted domain. Published at: April 27, 2021 at 09:15PM View on website April 27, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-21989 HomeAutomation 3.3.2 is affected by Cross Site Request Forgery (CSRF). The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site. Published at: April 27, 2021 at 09:15PM View on website April 27, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-21987 HomeAutomation 3.3.2 is affected by persistent Cross Site Scripting (XSS). XSS vulnerabilities occur when input passed via several parameters to several scripts is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session. Published at: April 27, 2021 at 09:15PM View on website April 27, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-36326 PHPMailer 6.1.8 through 6.4.0 allows object injection through Phar Deserialization via addAttachment with a UNC pathname. NOTE: this is similar to CVE-2018-19296, but arose because 6.1.8 fixed a functionality problem in which UNC pathnames were always considered unreadable by PHPMailer, even in safe contexts. As an unintended side effect, this fix eliminated the code that blocked addAttachment exploitation. Published at: April 28, 2021 at 06:15AM View on website April 28, 2021 at 08:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-21996 AVE DOMINAplus <=1.10.x suffers from an unauthenticated reboot command execution. Attackers can exploit this issue to cause a denial of service scenario. Published at: April 28, 2021 at 06:15PM View on website April 28, 2021 at 07:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-21994 AVE DOMINAplus <=1.10.x suffers from clear-text credentials disclosure vulnerability that allows an unauthenticated attacker to issue a request to an unprotected directory that hosts an XML file '/xml/authClients.xml' and obtain administrative login information that allows for a successful authentication bypass attack. Published at: April 28, 2021 at 06:15PM View on website April 28, 2021 at 07:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-21993 In WEMS Limited Enterprise Manager 2.58, input passed to the GET parameter 'email' is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML code in a user's browser session in context of an affected site. Published at: April 28, 2021 at 06:15PM View on website April 28, 2021 at 07:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-21991 AVE DOMINAplus <=1.10.x suffers from an authentication bypass vulnerability due to missing control check when directly calling the autologin GET parameter in changeparams.php script. Setting the autologin value to 1 allows an unauthenticated attacker to permanently disable the authentication security control and access the management interface with admin privileges without providing credentials. Published at: April 28, 2021 at 05:15PM View on website April 28, 2021 at 07:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-18020 SQL Injection in PHPSHE Mall System v1.7 allows remote attackers to execute arbitrary code by injecting SQL commands into the "user_phone" parameter of a crafted HTTP request to the "admin.php" component. Published at: April 28, 2021 at 05:15PM View on website April 28, 2021 at 07:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-18019 SQL Injection in Xinhu OA System v1.8.3 allows remote attackers to obtain sensitive information by injecting arbitrary commands into the "typeid" variable of the "createfolderAjax" function in the "mode_worcAction.php" component. Published at: April 28, 2021 at 05:15PM View on website April 28, 2021 at 07:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-18022 Cross Site Scripting (XSS) in Qibosoft QiboCMS v7 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information by injecting arbitrary commands in a HTTP request to the "ewebeditor\3.1.1\kindeditor.js" component. Published at: April 28, 2021 at 07:15PM View on website April 28, 2021 at 09:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-17999 Cross Site Scripting (XSS) in MiniCMS v1.10 allows remote attackers to execute arbitrary code by injecting commands via a crafted HTTP request to the component "/mc-admin/post-edit.php". Published at: April 28, 2021 at 07:15PM View on website April 28, 2021 at 09:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-21997 Smartwares HOME easy <=1.0.9 is vulnerable to an unauthenticated database backup download and information disclosure vulnerability. An attacker could disclose sensitive and clear-text information resulting in authentication bypass, session hijacking and full system control. Published at: April 29, 2021 at 06:15PM View on website April 29, 2021 at 07:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-21995 Inim Electronics Smartliving SmartLAN/G/SI <=6.x uses default hardcoded credentials. An attacker could exploit this to gain Telnet, SSH and FTP access to the system. Published at: April 29, 2021 at 06:15PM View on website April 29, 2021 at 07:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-21992 Inim Electronics SmartLiving SmartLAN/G/SI <=6.x suffers from an authenticated remote command injection vulnerability. The issue exist due to the 'par' POST parameter not being sanitized when called with the 'testemail' module through web.cgi binary. The vulnerable CGI binary (ELF 32-bit LSB executable, ARM) is calling the 'sh' executable via the system() function to issue a command using the mailx service and its vulnerable string format parameter allowing for OS command injection with root privileges. An attacker can remotely execute system commands as the root user using default credentials and bypass access controls in place. Published at: April 29, 2021 at 06:15PM View on website April 29, 2021 at 07:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-21990 Emmanuel MyDomoAtHome (MDAH) REST API REST API Domoticz ISS Gateway 0.2.40 is affected by an information disclosure vulnerability due to improper access control enforcement. An unauthenticated remote attacker can exploit this, via a specially crafted request to gain access to sensitive information. Published at: April 29, 2021 at 05:15PM View on website April 29, 2021 at 07:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-21452 An issue was discovered in uniview ISC2500-S. This is an upload vulnerability where an attacker can upload malicious code via /Interface/DevManage/EC.php?cmd=upload Published at: April 29, 2021 at 08:15PM View on website April 29, 2021 at 09:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-21101 Cross Site Scriptiong vulnerabilityin Screenly screenly-ose all versions, including v1.8.2 (2019-09-25-Screenly-OSE-lite.img), in the 'Add Asset' page via manipulation of a 'URL' field, which could let a remote malicious user execute arbitrary code. Published at: April 29, 2021 at 08:15PM View on website April 29, 2021 at 09:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-18032 Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted file into the "lib/common/shapes.c" component. Published at: April 29, 2021 at 09:15PM View on website April 29, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-15225 django-filter is a generic system for filtering Django QuerySets based on user selections. In django-filter before version 2.4.0, automatically generated `NumberFilter` instances, whose value was later converted to an integer, were subject to potential DoS from maliciously input using exponential format with sufficiently large exponents. Version 2.4.0+ applies a `MaxValueValidator` with a a default `limit_value` of 1e50 to the form field used by `NumberFilter` instances. In addition, `NumberFilter` implements the new `get_max_validator()` which should return a configured validator instance to customise the limit, or else `None` to disable the additional validation. Users may manually apply an equivalent validator if they are not able to upgrade. Published at: April 30, 2021 at 12:15AM View on website April 30, 2021 at 01:37AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-18035 Cross Site Scripting (XSS) in Jeesns v1.4.2 allows remote attackers to execute arbitrary code by injecting commands into the "CKEditorFuncNum" parameter in the component "CkeditorUploadController.java". Published at: April 30, 2021 at 02:15AM View on website April 30, 2021 at 03:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-18070 Path Traversal in iCMS v7.0.13 allows remote attackers to delete folders by injecting commands into a crafted HTTP request to the "do_del()" method of the component "database.admincp.php". Published at: April 30, 2021 at 03:15AM View on website April 30, 2021 at 08:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-1721 A flaw was found in the Key Recovery Authority (KRA) Agent Service in pki-core 10.10.5 where it did not properly sanitize the recovery ID during a key recovery request, enabling a reflected cross-site scripting (XSS) vulnerability. An attacker could trick an authenticated victim into executing specially crafted Javascript code. Published at: April 30, 2021 at 03:15PM View on website April 30, 2021 at 05:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-15153 Ampache before version 4.2.2 allows unauthenticated users to perform SQL injection. Refer to the referenced GitHub Security Advisory for details and a workaround. This is fixed in version 4.2.2 and the development branch. Published at: April 30, 2021 at 07:15PM View on website April 30, 2021 at 09:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-18084 Cross Site Scripting (XSS) in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into the "referer" field of a POST request to the component "/member/index/login.html" when logging in. Published at: May 01, 2021 at 12:15AM View on website May 01, 2021 at 01:36AM via National Vulnerability Database

Weekly Update: a new vulnerability is published on the National Vulnerability Database (52 items)

New vulnerabilities from the NVD: CVE-2020-7851 Innorix Web-Based File Transfer Solution versuibs prior to and including 9.2.18.385 contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the internal method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection. Published at: April 19, 2021 at 04:15PM View on website April 19, 2021 at 05:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-28141 The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript that will execute when viewing the messages page. Published at: April 19, 2021 at 07:15PM View on website April 19, 2021 at 09:37PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-27241 An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The serialnumber parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Published at: April 20, 2021 at 12:15AM View on website April 20, 2021 at 01:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-27240 An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The componentStatus parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection An attacker can make an authenticated HTTP request to trigger this vulnerability. Published at: April 20, 2021 at 12:15AM View on website April 20, 2021 at 01:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2021-20453 IBM WebSphere Application Server 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 196648. Published at: April 20, 2021 at 03:15PM View on website April 20, 2021 at 08:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2021-20023 SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host. Published at: April 20, 2021 at 03:15PM View on website April 20, 2021 at 08:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-7856 A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficient authentication validation. Published at: April 20, 2021 at 04:15PM View on website April 20, 2021 at 08:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2021-20453 IBM WebSphere Application Server 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 196648. Published at: April 20, 2021 at 03:15PM View on website April 20, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2021-20023 SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host. Published at: April 20, 2021 at 03:15PM View on website April 20, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-7856 A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficient authentication validation. Published at: April 20, 2021 at 04:15PM View on website April 20, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2021-20501 IBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local-domain recipients to the SMTP server, caused by using a non-default configuration. An attacker could exploit this vulnerability to consume unnecessary network bandwidth and disk space, and allow remote attackers to send spam email. IBM X-Force ID: 198056. Published at: April 21, 2021 at 03:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2021-20454 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 196649. Published at: April 21, 2021 at 03:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2021-1079 NVIDIA GeForce Experience, all versions prior to 3.22, contains a vulnerability in GameStream plugins where log files are created using NT/System level permissions, which may lead to code execution, denial of service, or local privilege escalation. Published at: April 20, 2021 at 07:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-7857 A vulnerability of XPlatform could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficient validation of improper classes. This issue affects: Tobesoft XPlatform versions prior to 9.2.2.280. Published at: April 20, 2021 at 11:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-35982 An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function gf_hinter_track_finalize() in media_tools/isom_hinter.c. Published at: April 21, 2021 at 07:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-35981 An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function SetupWriters() in isomedia/isom_store.c. Published at: April 21, 2021 at 07:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-35980 An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is a use-after-free in the function gf_isom_box_del() in isomedia/box_funcs.c. Published at: April 21, 2021 at 07:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-35979 An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is heap-based buffer overflow in the function gp_rtp_builder_do_avc() in ietf/rtp_pck_mpeg4.c. Published at: April 21, 2021 at 07:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-35314 An OS command injection vulnerability in the installUpdateThemePluginAction function in index.php in WonderCMS 3.1.3, allows remote attackers to upload a custom plugin which can contain arbitrary code and obtain a webshell via the theme/plugin installer. Published at: April 20, 2021 at 11:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-35313 A server-side request forgery (SSRF) vulnerability in the addCustomThemePluginRepository function in index.php in WonderCMS 3.1.3 allows remote attackers to execute arbitrary code via a crafted URL to the theme/plugin installer. Published at: April 20, 2021 at 11:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-26197 Dell PowerScale OneFS 8.1.0 - 9.1.0 contains an LDAP Provider inability to connect over TLSv1.2 vulnerability. It may make it easier to eavesdrop and decrypt such traffic for a malicious actor. Note: This does not affect clusters which are not relying on an LDAP server for the authentication provider. Published at: April 20, 2021 at 08:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-25864 HashiCorp Consul and Consul Enterprise up to version 1.9.4 key-value (KV) raw mode was vulnerable to cross-site scripting. Fixed in 1.9.5, 1.8.10 and 1.7.14. Published at: April 20, 2021 at 07:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-14105 The application in the mobile phone can read the SNO information of the device, Xiaomi 10 MIUI < 2020.01.15. Published at: April 20, 2021 at 07:15PM View on website April 21, 2021 at 10:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-28973 The ABUS Secvest wireless alarm system FUAA50000 (v3.01.17) fails to properly authenticate some requests to its built-in HTTPS interface. Someone can use this vulnerability to obtain sensitive information from the system, such as usernames and passwords. This information can then be used to reconfigure or disable the alarm system. Published at: April 21, 2021 at 10:15PM View on website April 21, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-23932 An issue was discovered in gpac before 1.0.1. A NULL pointer dereference exists in the function dump_isom_sdp located in filedump.c. It allows an attacker to cause Denial of Service. Published at: April 21, 2021 at 09:15PM View on website April 21, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-23931 An issue was discovered in gpac before 1.0.1. The abst_box_read function in box_code_adobe.c has a heap-based buffer over-read. Published at: April 21, 2021 at 09:15PM View on website April 21, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-23930 An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function nhmldump_send_header located in write_nhml.c. It allows an attacker to cause Denial of Service. Published at: April 21, 2021 at 09:15PM View on website April 21, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-23928 An issue was discovered in gpac before 1.0.1. The abst_box_read function in box_code_adobe.c has a heap-based buffer over-read. Published at: April 21, 2021 at 09:15PM View on website April 21, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-23922 An issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read. Published at: April 21, 2021 at 09:15PM View on website April 21, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-23921 An issue was discovered in fast_ber through v0.4. yy::yylex() in asn_compiler.hpp has a heap-based buffer over-read. Published at: April 21, 2021 at 09:15PM View on website April 21, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-23915 An issue was discovered in cpp-peglib through v0.1.12. peg::resolve_escape_sequence() in peglib.h has a heap-based buffer over-read. Published at: April 21, 2021 at 09:15PM View on website April 21, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-23914 An issue was discovered in cpp-peglib through v0.1.12. A NULL pointer dereference exists in the peg::AstOptimizer::optimize() located in peglib.h. It allows an attacker to cause Denial of Service. Published at: April 21, 2021 at 09:15PM View on website April 21, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-23912 An issue was discovered in Bento4 through v1.6.0-637. A NULL pointer dereference exists in the function AP4_StszAtom::GetSampleSize() located in Ap4StszAtom.cpp. It allows an attacker to cause Denial of Service. Published at: April 21, 2021 at 09:15PM View on website April 21, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-23907 An issue was discovered in retdec v3.3. In function canSplitFunctionOn() of ir_modifications.cpp, there is a possible out of bounds read due to a heap buffer overflow. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. Published at: April 21, 2021 at 09:15PM View on website April 21, 2021 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-36324 Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the application/json content type. Published at: April 21, 2021 at 11:15PM View on website April 22, 2021 at 01:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-27569 Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier. The VPN service writes logs to a location that is world writable and can be leveraged to gain write access to any file on the system. Published at: April 22, 2021 at 01:15AM View on website April 22, 2021 at 03:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-27568 Insecure File Permissions exist in Aviatrix Controller 5.3.1516. Several world writable files and directories were found in the controller resource. Note: All Aviatrix appliances are fully encrypted. This is an extra layer of security. Published at: April 22, 2021 at 01:15AM View on website April 22, 2021 at 03:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-27738 A vulnerability has been identified in Nucleus 4 (All versions < V4.1.0), Nucleus NET (All versions), Nucleus RTOS (versions including affected DNS modules), Nucleus ReadyStart (All versions < V2017.02.3), Nucleus Source Code (versions including affected DNS modules), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), VSTAR (versions including affected DNS modules). The DNS domain name record decompression functionality does not properly validate the pointer offset values. The parsing of malformed responses could result in a read access past the end of an allocated structure. An attacker with a privileged position in the network could leverage this vulnerability to cause a denial-of-service condition. Published at: April 23, 2021 at 12:15AM View on website April 23, 2021 at 02:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-27737 A vulnerability has been identified in Nucleus 4 (All versions < V4.1.0), Nucleus NET (All versions), Nucleus RTOS (versions including affected DNS modules), Nucleus ReadyStart (All versions < V2017.02.3), Nucleus Source Code (versions including affected DNS modules), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), VSTAR (versions including affected DNS modules). The DNS response parsing functionality does not properly validate various length and counts of the records. The parsing of malformed responses could result in a read past the end of an allocated structure. An attacker with a privileged position in the network could leverage this vulnerability to cause a denial-of-service condition or leak the memory past the allocated structure. Published at: April 23, 2021 at 12:15AM View on website April 23, 2021 at 02:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-27736 A vulnerability has been identified in Nucleus 4 (All versions < V4.1.0), Nucleus NET (All versions), Nucleus RTOS (versions including affected DNS modules), Nucleus ReadyStart (All versions < V2017.02.3), Nucleus Source Code (versions including affected DNS modules), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), VSTAR (versions including affected DNS modules). The DNS domain name label parsing functionality does not properly validate the null-terminated name in DNS-responses. The parsing of malformed responses could result in a read past the end of an allocated structure. An attacker with a privileged position in the network could leverage this vulnerability to cause a denial-of-service condition or leak the read memory. Published at: April 23, 2021 at 12:15AM View on website April 23, 2021 at 02:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-27009 A vulnerability has been identified in Nucleus NET (All versions < V5.2), Nucleus RTOS (versions including affected DNS modules), Nucleus Source Code (versions including affected DNS modules), VSTAR (versions including affected DNS modules). The DNS domain name record decompression functionality does not properly validate the pointer offset values. The parsing of malformed responses could result in a write past the end of an allocated structure. An attacker with a privileged position in the network could leverage this vulnerability to execute code in the context of the current process or cause a denial-of-service condition. Published at: April 23, 2021 at 12:15AM View on website April 23, 2021 at 02:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-26997 A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2020 (SE2020MP13), Solid Edge SE2021 (All Versions < SE2021MP4). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could lead to pointer dereferences of a value obtained from untrusted source. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-11919) Published at: April 23, 2021 at 12:15AM View on website April 23, 2021 at 02:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-25244 A vulnerability has been identified in LOGO! Soft Comfort (All versions). The software insecurely loads libraries which makes it vulnerable to DLL hijacking. Successful exploitation by a local attacker could lead to a takeover of the system where the software is installed. Published at: April 23, 2021 at 12:15AM View on website April 23, 2021 at 02:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-25243 A vulnerability has been identified in LOGO! Soft Comfort (All versions). A zip slip vulnerability could be triggered while importing a compromised project file to the affected software. Chained with other vulnerabilities this vulnerability could ultimately lead to a system takeover by an attacker. Published at: April 23, 2021 at 12:15AM View on website April 23, 2021 at 02:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-15795 A vulnerability has been identified in Nucleus NET (All versions < V5.2), Nucleus RTOS (versions including affected DNS modules), Nucleus Source Code (versions including affected DNS modules), VSTAR (versions including affected DNS modules). The DNS domain name label parsing functionality does not properly validate the names in DNS-responses. The parsing of malformed responses could result in a write past the end of an allocated structure. An attacker with a privileged position in the network could leverage this vulnerability to execute code in the context of the current process or cause a denial-of-service condition. Published at: April 23, 2021 at 12:15AM View on website April 23, 2021 at 02:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-17564 Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to the " Admin/DataAction.class.php" component. Published at: April 23, 2021 at 01:15AM View on website April 23, 2021 at 03:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-17563 Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to " /index.php?s=/admin-tpl-del&id=". Published at: April 23, 2021 at 01:15AM View on website April 23, 2021 at 03:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-25028 Missing variable sanitization in Grid component in com.vaadin:vaadin-server versions 7.4.0 through 7.7.19 (Vaadin 7.4.0 through 7.7.19), and 8.0.0 through 8.8.4 (Vaadin 8.0.0 through 8.8.4) allows attacker to inject malicious JavaScript via unspecified vector Published at: April 23, 2021 at 07:15PM View on website April 23, 2021 at 09:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-25027 Missing output sanitization in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.10 (Vaadin 10.0.0 through 10.0.13), and 1.1.0 through 1.4.2 (Vaadin 11.0.0 through 13.0.5) allows attacker to execute malicious JavaScript via crafted URL Published at: April 23, 2021 at 07:15PM View on website April 23, 2021 at 09:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2018-25007 Missing check in UIDL request handler in com.vaadin:flow-server versions 1.0.0 through 1.0.5 (Vaadin 10.0.0 through 10.0.7, and 11.0.0 through 11.0.2) allows attacker to update element property values via crafted synchronization message. Published at: April 23, 2021 at 07:15PM View on website April 23, 2021 at 09:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2017-20003 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none. Published at: April 23, 2021 at 07:15PM View on website April 23, 2021 at 09:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-17542 Cross Site Scripting (XSS) in dotCMS v5.1.5 allows remote attackers to execute arbitrary code by injecting a malicious payload into the "Task Detail" comment window of the "/dotAdmin/#/c/workflow" component. Published at: April 24, 2021 at 12:15AM View on website April 24, 2021 at 01:36AM via National Vulnerability Database