CISA Warns of Phishing Campaign with Loan-Relief Lure

Enterprise VulnerabilitiesFrom DHS/US-CERT's National Vulnerability Database CVE-2020-24348PUBLISHED: 2020-08-13

njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_json_stringify_iterator in njs_json.c.

CVE-2020-24349PUBLISHED: 2020-08-13

njs through 0.4.3, used in NGINX, allows control-flow hijack in njs_value_property in njs_value.c. NOTE: the vendor considers the issue to be "fluff" in the NGINX use case because there is no remote attack surface.

CVE-2020-7360PUBLISHED: 2020-08-13

An Uncontrolled Search Path Element (CWE-427) vulnerability in SmartControl version 4.3.15 and versions released before April 15, 2020 may allow an authenticated user to escalate privileges by placing a specially crafted DLL file in the search path. This issue was fixed in version 1.0.7, which was r...

CVE-2020-24342PUBLISHED: 2020-08-13

Lua through 5.4.0 allows a stack redzone cross in luaO_pushvfstring because a protection mechanism wrongly calls luaD_callnoyield twice in a row.

CVE-2020-24343PUBLISHED: 2020-08-13

Artifex MuJS through 1.0.7 has a use-after-free in jsrun.c because of unconditional marking in jsgc.c.

Support the originator by clicking the read the rest link below.