Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
691 results · page 5 of 14
Aug 16, 2022XPDF commit ffaf11c was discovered to contain a stack overflow via __asan_memcpy at asan_interceptors_memintrinsics.cpp.CVE-2022-38227 · Other software · Xpdf Project · reported by MITREHigh 7.8
XPDF commit ffaf11c was discovered to contain a stack overflow via __asan_memcpy at asan_interceptors_memintrinsics.cpp.
- Product
- Xpdf
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 16, 2022tifig v0.2.2 was discovered to contain a heap-buffer overflow via __asan_memmove at /asan/asan_interceptors_memintrinsics.cpp.CVE-2022-36150 · Other software · Monostream · reported by MITREMedium 5.5
tifig v0.2.2 was discovered to contain a heap-buffer overflow via __asan_memmove at /asan/asan_interceptors_memintrinsics.cpp.
- Product
- Tifig
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 16, 2022PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via asan_interceptors_memintrinsics.cpp.CVE-2022-35010 · Other software · Pngdec Project · reported by MITREMedium 6.5
PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via asan_interceptors_memintrinsics.cpp.
- Product
- Pngdec
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 5, 2022Ethermint is an Ethereum library.CVE-2022-35936 · Other software · evmos · reported by GitHubHigh 8.2
Ethermint is an Ethereum library. In Ethermint running versions before `v0.17.2`, the contract `selfdestruct` invocation permanently removes the corresponding bytecode from the internal database storage. However, due to a bug in the `DeleteAccount`function, all contracts that used the identical bytecode (i.e shared the same `CodeHash`) will also stop working once one contract invokes `selfdestruct`, even though the other contracts did not invoke the `selfdestruct` OPCODE. This vulnerability has been patched in Ethermint version v0.18.0. The patch has state machine-breaking changes for applications using Ethermint, so a coordinated upgrade procedure is required. A workaround is available. If a contract is subject to DoS due to this issue, the user can redeploy the same contract, i.e. with identical bytecode, so that the original contract's code is recovered. The new contract deployment restores the `bytecode hash -> bytecode` entry in the internal state.
- Product
- ethermint
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 15, 2022Vulnerabilities in the Mint WorkBench allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary contentCVE-2022-26057 · Other software · ABB · reported by cybersecurity@ch.abb.comMedium 6.7
Vulnerabilities in the Mint WorkBench allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Mint WorkBench installer file allows a low-privileged user to run a "repair" operation on the product
- Product
- Mint WorkBench
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsearch.abb.comsearch.abb.com
Jun 2, 2022Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=sales/view_details&id.CVE-2022-31994 · Other software · Badminton Center Management System Project · reported by MITREHigh 7.2
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=sales/view_details&id.
- Product
- Badminton Center Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2022Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=delete_service.CVE-2022-31993 · Other software · Badminton Center Management System Project · reported by MITRECritical 9.8
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=delete_service.
- Product
- Badminton Center Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2022Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=court_rentals/view_court_rental&id=.CVE-2022-31992 · Other software · Badminton Center Management System Project · reported by MITREHigh 7.2
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=court_rentals/view_court_rental&id=.
- Product
- Badminton Center Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2022Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=delete_court.CVE-2022-31991 · Other software · Badminton Center Management System Project · reported by MITRECritical 9.8
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=delete_court.
- Product
- Badminton Center Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2022Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=delete_product.CVE-2022-31990 · Other software · Badminton Center Management System Project · reported by MITRECritical 9.8
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/classes/Master.php?f=delete_product.
- Product
- Badminton Center Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2022Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=user/manage_user&id=.CVE-2022-31989 · Other software · Badminton Center Management System Project · reported by MITRECritical 9.8
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=user/manage_user&id=.
- Product
- Badminton Center Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2022Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=reports/daily_services_report&date=.CVE-2022-31988 · Other software · Badminton Center Management System Project · reported by MITREHigh 7.2
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=reports/daily_services_report&date=.
- Product
- Badminton Center Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2022Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/daily_court_rental_report&date=.CVE-2022-31986 · Other software · Badminton Center Management System Project · reported by MITREHigh 7.2
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/daily_court_rental_report&date=.
- Product
- Badminton Center Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2022Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/daily_sales_report&date=.CVE-2022-31985 · Other software · Badminton Center Management System Project · reported by MITREHigh 7.2
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=reports/daily_sales_report&date=.
- Product
- Badminton Center Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2022Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/services/view_service.php?id=.CVE-2022-32006 · Other software · Badminton Center Management System Project · reported by MITREHigh 7.2
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/services/view_service.php?id=.
- Product
- Badminton Center Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2022Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/services/manage_service.php?id=.CVE-2022-32005 · Other software · Badminton Center Management System Project · reported by MITREHigh 7.2
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/services/manage_service.php?id=.
- Product
- Badminton Center Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2022Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/manage_product.php?id=.CVE-2022-32004 · Other software · Badminton Center Management System Project · reported by MITREHigh 7.2
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/manage_product.php?id=.
- Product
- Badminton Center Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2022Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/view_court.php?id=.CVE-2022-32003 · Other software · Badminton Center Management System Project · reported by MITREHigh 7.2
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/view_court.php?id=.
- Product
- Badminton Center Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2022Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/manage_court.php?id=.CVE-2022-32002 · Other software · Badminton Center Management System Project · reported by MITRECritical 9.8
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/courts/manage_court.php?id=.
- Product
- Badminton Center Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2022Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/view_product.php?id=.CVE-2022-32001 · Other software · Badminton Center Management System Project · reported by MITREHigh 7.2
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/products/view_product.php?id=.
- Product
- Badminton Center Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2022Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=service_transactions/manage_service_transaction&id=.CVE-2022-32000 · Other software · Badminton Center Management System Project · reported by MITREHigh 7.2
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=service_transactions/manage_service_transaction&id=.
- Product
- Badminton Center Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2022Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=service_transactions/view_details&id=.CVE-2022-31998 · Other software · Badminton Center Management System Project · reported by MITREHigh 7.2
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=service_transactions/view_details&id=.
- Product
- Badminton Center Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2022Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=sales/manage_sale&id=.CVE-2022-31996 · Other software · Badminton Center Management System Project · reported by MITREHigh 7.2
Badminton Center Management System v1.0 is vulnerable to SQL Injection via bcms/admin/?page=sales/manage_sale&id=.
- Product
- Badminton Center Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2022Badminton Center Management System V1.0 is vulnerable to SQL Injection via parameter 'id' in /bcms/admin/court_rentals/update_status.php.CVE-2022-30490 · Other software · Badminton Center Management System Project · reported by MITRECritical 9.8
Badminton Center Management System V1.0 is vulnerable to SQL Injection via parameter 'id' in /bcms/admin/court_rentals/update_status.php.
- Product
- Badminton Center Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 2, 2022OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharacters in the 'ports' CVE-2021-34079 · Other software · Docker-tester Project · reported by MITRECritical 9.8
OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharacters in the 'ports' entry of a crafted docker-compose.yml file.
- Product
- Docker-tester
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordadvisory.checkmarx.netnpmjs.com
May 24, 2022Badminton Center Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /bcms/classes/Master.php?f=save_court_rental.CVE-2022-30456 · Other software · Badminton Center Management System Project · reported by MITREMedium 5.4
Badminton Center Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /bcms/classes/Master.php?f=save_court_rental.
- Product
- Badminton Center Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 24, 2022Badminton Center Management System 1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=delete_court_rental, id.CVE-2022-30455 · Other software · Badminton Center Management System Project · reported by MITRECritical 9.8
Badminton Center Management System 1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=delete_court_rental, id.
- Product
- Badminton Center Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 23, 2022A vulnerability, which was classified as problematic, was found in Badminton Center Management System.CVE-2022-1817 · Other software · unspecified · reported by VulDBLow 3.5
A vulnerability, which was classified as problematic, was found in Badminton Center Management System. This affects the userlist module at /bcms/admin/?page=user/list. The manipulation of the argument username with the input </td><img src="" onerror="alert(1)"><td>1 leads to an authenticated cross site scripting. Exploit details have been disclosed to the public.
- Product
- Badminton Center Management System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 22, 2022During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad mCVE-2022-1107 · Other software · Lenovo · reported by psirt@lenovo.comMedium 6.7
During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code.
- Product
- ThinkPad BIOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.lenovo.comsupport.lenovo.com
Aug 3, 2021An integer overflow in the mintToken function of a smart contract implementation for Doftcoin Token, an Ethereum ERC20 token, allows the owner to cause unexpectCVE-2021-34270 · Other software · Doft · reported by MITREHigh 7.5
An integer overflow in the mintToken function of a smart contract implementation for Doftcoin Token, an Ethereum ERC20 token, allows the owner to cause unexpected financial losses.
- Product
- Doftcoin
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 6, 2021Mintty before 3.4.7 mishandles Bracketed Paste Mode.CVE-2021-31701 · Other software · Mintty Project · reported by MITREHigh 7.5
Mintty before 3.4.7 mishandles Bracketed Paste Mode.
- Product
- Mintty
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 3, 2021Mintty before 3.4.5 allows remote servers to cause a denial of service (Windows GUI hang) by telling the Mintty window to change its title repeatedly at high spCVE-2021-28848 · Other software · Mintty Project · reported by MITREHigh 7.5
Mintty before 3.4.5 allows remote servers to cause a denial of service (Windows GUI hang) by telling the Mintty window to change its title repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls. In other words, it does not implement a usleep or similar delay upon processing a title change.
- Product
- Mintty
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 26, 2021A weak password requirement vulnerability exists in the Create New User function of MintHCM RELEASE 3.0.8, which could lead an attacker to easier password bruteCVE-2021-25839 · Other software · Minthcm · reported by MITRECritical 9.8
A weak password requirement vulnerability exists in the Create New User function of MintHCM RELEASE 3.0.8, which could lead an attacker to easier password brute-forcing.
- Product
- Minthcm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 26, 2021The Import function in MintHCM RELEASE 3.0.8 allows an attacker to execute a cross-site scripting (XSS) payload in file-upload.CVE-2021-25838 · Other software · Minthcm · reported by MITREMedium 6.1
The Import function in MintHCM RELEASE 3.0.8 allows an attacker to execute a cross-site scripting (XSS) payload in file-upload.
- Product
- Minthcm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 8, 2021Cosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module.CVE-2021-25837 · Other software · Chainsafe · reported by MITREHigh 7.5
Cosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module. Due to the inconsistency between the Storage caching cycle and the Tx processing cycle, Storage changes caused by a failed transaction are improperly reserved in memory. Although the bad storage cache data will be discarded at EndBlock, it is still valid in the current block, which enables many possible attacks such as an "arbitrary mint token".
- Product
- Ethermint
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 8, 2021Cosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module.CVE-2021-25836 · Other software · Chainsafe · reported by MITREHigh 7.5
Cosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module. The bytecode set in a FAILED transaction wrongfully remains in memory(stateObject.code) and is further written to persistent store at the Endblock stage, which may be utilized to build honeypot contracts.
- Product
- Ethermint
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 8, 2021Cosmos Network Ethermint <= v0.4.0 is affected by a cross-chain transaction replay vulnerability in the EVM module.CVE-2021-25835 · Other software · Chainsafe · reported by MITREHigh 7.5
Cosmos Network Ethermint <= v0.4.0 is affected by a cross-chain transaction replay vulnerability in the EVM module. Since ethermint uses the same chainIDEpoch and signature schemes with ethereum for compatibility, a verified signature in ethereum is still valid in ethermint with the same msg content and chainIDEpoch, which enables "cross-chain transaction replay" attack.
- Product
- Ethermint
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 8, 2021Cosmos Network Ethermint <= v0.4.0 is affected by a transaction replay vulnerability in the EVM module.CVE-2021-25834 · Other software · Chainsafe · reported by MITREHigh 7.5
Cosmos Network Ethermint <= v0.4.0 is affected by a transaction replay vulnerability in the EVM module. If the victim sends a very large nonce transaction, the attacker can replay the transaction through the application.
- Product
- Ethermint
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 26, 2021Tendermint Core is an open source Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine - written in any programming language - and seCVE-2021-21271 · Other software · tendermint · reported by GitHubMedium 6.5
Tendermint Core is an open source Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine - written in any programming language - and securely replicates it on many machines. Tendermint Core v0.34.0 introduced a new way of handling evidence of misbehavior. As part of this, we added a new Timestamp field to Evidence structs. This timestamp would be calculated using the same algorithm that is used when a block is created and proposed. (This algorithm relies on the timestamp of the last commit from this specific block.) In Tendermint Core v0.34.0-v0.34.2, the consensus reactor is responsible for forming DuplicateVoteEvidence whenever double signs are observed. However, the current block is still “in flight” when it is being formed by the consensus reactor. It hasn’t been finalized through network consensus yet. This means that different nodes in the network may observe different “last commits” when assigning a timestamp to DuplicateVoteEvidence. In turn, different nodes could form DuplicateVoteEvidence objects at the same height but with different timestamps. One DuplicateVoteEvidence object (with one timestamp) will then eventually get finalized in the block,
- Product
- tendermint
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 19, 2020This affects the package MintegralAdSDK before 6.6.0.0.CVE-2020-7745 · Other software · Mintegral · reported by report@snyk.ioHigh 7.1
This affects the package MintegralAdSDK before 6.6.0.0. The SDK distributed by the company contains malicious functionality that acts as a backdoor. Mintegral and their partners (advertisers) can remotely execute arbitrary code on a user device.
- Product
- Mintegraladsdk
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2020This affects all versions of package com.mintegral.msdk:alphab.CVE-2020-7744 · Other software · Mintegral · reported by report@snyk.ioMedium 4.7
This affects all versions of package com.mintegral.msdk:alphab. The Android SDK distributed by the company contains malicious functionality in this module that tracks: 1. Downloads from Google urls either within Google apps or via browser including file downloads, e-mail attachments and Google Docs links. 2. All apk downloads, either organic or not. Mintegral listens to download events in Android's download manager and detects if the downloaded file's url contains: a. google.com or comes from a Google app (the com.android.vending package) b. Ends with .apk for apk downloads In both cases, the module sends the captured data back to Mintegral's servers. Note that the malicious functionality keeps running even if the app is currently not in focus (running in the background).
- Product
- Mintegraladsdk
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 24, 2020This affects the package MintegralAdSDK from 0.0.0.CVE-2020-7705 · Other software · Mintegral · reported by report@snyk.ioHigh 7.1
This affects the package MintegralAdSDK from 0.0.0. The SDK distributed by the company contains malicious functionality that tracks any URL opened by the app and reports it back to the company, along with performing advertisement attribution fraud. Mintegral can remotely activate hooks on the UIApplication, openURL, SKStoreProductViewController, loadProductWithParameters and NSURLProtocol methods along with anti-debug and proxy detection protection. If those hooks are active MintegralAdSDK sends obfuscated data about every opened URL in an application to their servers. Note that the malicious functionality is enabled even if the SDK was not enabled to serve ads.
- Product
- Mintegraladsdk
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 2, 2020TenderMint from version 0.33.0 and before version 0.33.6 allows block proposers to include signatures for the wrong block.CVE-2020-15091 · Other software · tendermint · reported by GitHubMedium 6.5
TenderMint from version 0.33.0 and before version 0.33.6 allows block proposers to include signatures for the wrong block. This may happen naturally if you start a network, have it run for some time and restart it (**without changing chainID**). A malicious block proposer (even with a minimal amount of stake) can use this vulnerability to completely halt the network. This issue is fixed in Tendermint 0.33.6 which checks all the signatures are for the block with 2/3+ majority before creating a commit.
- Product
- tendermint
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 11, 2020In SLP Validate (npm package slp-validate) before version 1.2.1, users could experience false-negative validation outcomes for MINT transaction operations.CVE-2020-11072 · Other software · simpleledger · reported by GitHubHigh 8.6
In SLP Validate (npm package slp-validate) before version 1.2.1, users could experience false-negative validation outcomes for MINT transaction operations. A poorly implemented SLP wallet could allow spending of the affected tokens which would result in the destruction of a user's minting baton. This has been fixed in slp-validate in version 1.2.1. Additonally, slpjs version 0.27.2 has a related fix under related CVE-2020-11071.
- Product
- slp-validate
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 11, 2020SLPJS (npm package slpjs) before version 0.27.2, has a vulnerability where users could experience false-negative validation outcomes for MINT transaction operatCVE-2020-11071 · Other software · simpleledger · reported by GitHubHigh 8.6
SLPJS (npm package slpjs) before version 0.27.2, has a vulnerability where users could experience false-negative validation outcomes for MINT transaction operations. A poorly implemented SLP wallet could allow spending of the affected tokens which would result in the destruction of a user's minting baton. This is fixed in version 0.27.2.
- Product
- slpjs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 14, 2020SAP Business Objects Business Intelligence Platform (AdminTools), versions 4.1, 4.2, allows an attacker to redirect users to a malicious site due to insufficienCVE-2020-6211 · Network & remote access · SAP SE · reported by cna@sap.comMedium 6.1
SAP Business Objects Business Intelligence Platform (AdminTools), versions 4.1, 4.2, allows an attacker to redirect users to a malicious site due to insufficient URL validation and steal credentials of the victim, leading to URL Redirection vulnerability.
- Product
- SAP Business Objects Business Intelligence Platform
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlaunchpad.support.sap.comwiki.scn.sap.com
Apr 10, 2020Tendermint before versions 0.33.3, 0.32.10, and 0.31.12 has a denial-of-service vulnerability.CVE-2020-5303 · Other software · Tendermint · reported by GitHubLow 3.1
Tendermint before versions 0.33.3, 0.32.10, and 0.31.12 has a denial-of-service vulnerability. Tendermint does not limit the number of P2P connection requests. For each p2p connection, it allocates XXX bytes. Even though this memory is garbage collected once the connection is terminated (due to duplicate IP or reaching a maximum number of inbound peers), temporary memory spikes can lead to OOM (Out-Of-Memory) exceptions. Additionally, Tendermint does not reclaim activeID of a peer after it's removed in Mempool reactor. This does not happen all the time. It only happens when a connection fails (for any reason) before the Peer is created and added to all reactors. RemovePeer is therefore called before AddPeer, which leads to always growing memory (activeIDs map). The activeIDs map has a maximum size of 65535 and the node will panic if this map reaches the maximum. An attacker can create a lot of connection attempts (exploiting above denial of service), which ultimately will lead to the node panicking. These issues are patched in Tendermint 0.33.3 and 0.32.10.
- Product
- Tendermint
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 7, 2020LinuxMint as of 2012-03-19 has temporary file creation vulnerabilities in mintUpdate.CVE-2012-1567 · Computers, phones & browsers · LinuxMint · reported by Red HatHigh 7.5
LinuxMint as of 2012-03-19 has temporary file creation vulnerabilities in mintUpdate.
- Product
- Mint
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordopenwall.comgithub.com
Feb 7, 2020LinuxMint as of 2012-03-19 has temporary file creation vulnerabilities in mintNanny.CVE-2012-1566 · Computers, phones & browsers · LinuxMint · reported by Red HatHigh 7.5
LinuxMint as of 2012-03-19 has temporary file creation vulnerabilities in mintNanny.
- Product
- Mint
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordopenwall.comopenwall.com
Dec 1, 2019In Zmanda Management Console 3.3.9, ZMC_Admin_Advanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metachCVE-2019-19469 · Other software · Zmanda · reported by MITREHigh 8.8
In Zmanda Management Console 3.3.9, ZMC_Admin_Advanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters. This may depend on weak default credentials.
- Product
- Amanda
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.