Archive
August 2019
Vulnerabilities first published in this month (UTC), newest first.
2,007 results · Feed
-
Unscored —
In cPanel before 57.9999.54, /scripts/addpop and /scripts/delpop exposed TTYs (SEC-113).
-
Unscored —
cPanel before 57.9999.54 allows certain denial-of-service outcomes via /scripts/killpvhost (SEC-112).
-
Unscored —
cPanel before 57.9999.54 allows self XSS on the Paper Lantern Landing Page (SEC-110).
-
Unscored —
cPanel before 57.9999.54 allows demo accounts to execute arbitrary code via ajax_maketext_syntax_util.pl (SEC-109).
-
Unscored —
The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore …
-
Unscored —
cPanel before 57.9999.105 allows newline injection via LOC records (CPANEL-6923).
-
Unscored —
cPanel before 58.0.4 allows code execution in the context of other user accounts through the PHP CGI handler (SEC-142).
-
Unscored —
cPanel before 58.0.4 has improper session handling for shared users (SEC-139).
-
Unscored —
cPanel before 58.0.4 allows demo-mode escape via Site Templates and Boxtrapper API calls (SEC-138).
-
Unscored —
cPanel before 58.0.4 does not set the Pear tmp directory during a PHP installation (SEC-137).
-
Unscored —
cPanel before 58.0.4 allows a file-ownership change (to nobody) via rearrangeacct (SEC-134).
-
Critical 9.8
Cisco Small Business 220 Series Smart Switches Remote Code Execution Vulnerabilities
Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the unde…
-
High 7.2
Cisco Small Business 220 Series Smart Switches Command Injection Vulnerability
A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient validation of user-supplied input. …
-
Critical 9.1
Cisco Small Business 220 Series Smart Switches Authentication Bypass Vulnerability
A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to upload arbitrary files. The vulnerability is due to incomplete authorization checks in the web management inte…
-
Unscored —
AdPlug 2.3.1 has multiple heap-based buffer overflows in Ca2mLoader::load() in a2m.cpp.
-
Unscored —
AdPlug 2.3.1 has multiple heap-based buffer overflows in CradLoader::load() in rad.cpp.
-
Unscored —
AdPlug 2.3.1 has multiple heap-based buffer overflows in CmtkLoader::load() in mtk.cpp.
-
Unscored —
An issue was discovered in ZenTao 11.5.1. There is an XSS (stored) vulnerability that leads to the capture of other peo…
-
Unscored —
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. In a CGI program running und…
-
Unscored —
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. An attacker can exploit OS C…
-
Unscored —
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. There is disclosure of the e…
-
Unscored —
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. An attacker can trigger read…
-
Unscored —
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. SQL injection vulnerabilitie…
-
Unscored —
A CSRF issue was discovered in webparam?user&action=set¶m=add in HTTPD on MicroDigital N-series cameras with firmwa…
-
Unscored —
An SSRF issue was discovered in HTTPD on MicroDigital N-series cameras with firmware through 6400.0.8.5 via FTP command…
-
Unscored —
An Incorrect Access Control issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5 beca…
-
Unscored —
A denial of service issue in HTTPD was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. An…
-
Unscored —
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. The firmware update process …
-
Unscored —
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. A buffer overflow in the act…
-
Unscored —
A cleartext password storage issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. Th…
-
Unscored —
NVIDIA Shield TV Experience prior to v8.0, contains a vulnerability in the NVIDIA Games App where it improperly exports…
-
Unscored —
NVIDIA Shield TV Experience prior to v8.0, contains a vulnerability in the custom NVIDIA API used in the mount system s…
-
Unscored —
NVIDIA Shield TV Experience prior to v8.0, NVIDIA Tegra bootloader contains a vulnerability in nvtboot where the Truste…
-
Unscored —
NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handl…
-
Unscored —
NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handl…
-
Unscored —
NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in DirectX drivers, in which a specially craf…
-
Unscored —
NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in DirectX drivers, in which a specially craf…
-
Unscored —
NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in the user mode video driver trace logger co…
-
Unscored —
Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, whi…
-
Unscored —
Das U-Boot versions 2019.07-rc1 through 2019.07-rc4 can double-free a cached block of data when listing files in a craf…