Category Archives: Advisories

CVE-2020-19695

April 4, 2023

Read Time:8 Second

Buffer Overflow found in Nginx NJS allows a remote attacker to execute arbitrary code via the njs_object_property parameter of the njs/njs_vm.c function.

Advisories

CVE-2020-19697

April 4, 2023

Read Time:10 Second

Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script in the <iframe>src parameter.

Advisories

CVE-2020-19698

April 4, 2023

Read Time:9 Second

Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the editor parameter.

Advisories

CVE-2020-19699

April 4, 2023

Read Time:9 Second

Cross Site Scripting vulnerability found in KOHGYLW Kiftd v.1.0.18 allows a remote attacker to execute arbitrary code via the <ifram> tag in the upload file page.

Advisories

CVE-2020-19850

April 4, 2023

Read Time:8 Second

An issue found in Directus API v.2.2.0 allows a remote attacker to cause a denial of service via a great amount of HTTP requests.

Advisories

pdns-recursor-4.8.4-1.el8

April 4, 2023

Read Time:10 Second

FEDORA-EPEL-2023-d4a7c0e04e

Packages in this update:

pdns-recursor-4.8.4-1.el8

Update description:

Update to 4.8.4

Release notes: https://doc.powerdns.com/recursor/changelog/4.8.html

Advisories

USN-5996-1: Liblouis vulnerabilities

April 4, 2023

Read Time:9 Second

It was discovered that Liblouis incorrectly handled certain files.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2023-26767, CVE-2023-26768, CVE-2023-26769)