Pagure before 5.6 allows XSS via the templates/blame.html blame view.

Published at: September 25, 2020 at 02:15AM
View on website

Pexip Infinity before 17 allows an unauthenticated remote attacker to achieve stored XSS via management web interface views.

Published at: September 25, 2020 at 12:23AM
View on website

Pexip Infinity before 18 allows Remote Denial of Service (TLS handshakes in RTMP).

Published at: September 25, 2020 at 12:23AM
View on website

Pexip Infinity before 18 allows remote Denial of Service (XML parsing).

Published at: September 25, 2020 at 12:23AM
View on website

lib/oauth/consumer.rb in the oauth-ruby gem through 0.5.4 for Ruby does not verify server X.509 certificates if a certificate bundle cannot be found, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information.

Published at: September 24, 2020 at 04:15PM
View on website