Archive
January 2020
Vulnerabilities first published in this month (UTC), newest first.
1,661 results · Feed
-
Unscored —
In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter.
-
Unscored —
Unrestricted file upload vulnerability in an unspecified third party tool in United Planet Intrexx Professional before …
-
Unscored —
Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to ex…
-
Unscored —
Heap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to e…
-
Unscored —
Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execu…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the management interface in Alcatel-Lucent 1830 Photonic Service Switch (PS…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Eucalyptus Management Console (EMC) 4.0.x before 4.0.2 allows remote attack…
-
Unscored —
Cross-site scripting (XSS) vulnerability in vwrooms/js/jsor-jcarousel/examples/special_textscroller.php in the VideoWhi…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the HTTP Interface in VideoLAN VLC Media Player before 2.0.7 all…
-
Unscored —
The scheduler in HTCondor before 8.2.6 allows remote authenticated users to execute arbitrary code.
-
Unscored —
The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor dat…
-
Unscored —CVE-2020-8504 Public exploit
School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=addadmin CSRF to add an administrat…
-
Unscored —CVE-2020-8505 Public exploit
School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=deleteadmin CSRF to delete a user.
-
Unscored —
Stack-based buffer overflow in the tcp_test function in aireplay-ng.c in Aircrack-ng before 1.2 RC 1 allows remote atta…
-
Unscored —
Stack-based buffer overflow in the gps_tracker function in airodump-ng.c in Aircrack-ng before 1.2 RC 1 allows local us…
-
Unscored —
Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange (OX) AppSuite before 7.4.2-rev10 …
-
Unscored —CVE-2014-3868 Public exploit
Multiple SQL injection vulnerabilities in ZeusCart 4.x.
-
Unscored —CVE-2014-3119 Public exploit
Multiple SQL injection vulnerabilities in web2Project 3.1 and earlier allow remote authenticated users to execute arbit…
-
Unscored —
Biscom Secure File Transfer (SFT) 5.0.1050 through 5.1.1067 and 6.0.1000 through 6.0.1003 allows Insecure Direct Object…
-
Unscored —
A vulnerability exists in the Aruba AirWave Management Platform 8.x prior to 8.2 in the management interface of an unde…
-
Medium 6.2
In a Linux KVM guest that has PV TLB enabled, a process in the guest kernel may be able to read memory locations from a…
-
Unscored —CVE-2019-13000 Public exploit
Eclair through 0.3 allows attackers to trigger loss of funds because of Incorrect Access Control. NOTE: README.md state…
-
High 7.5CVE-2019-12999 Public exploit
Improper Access Control in Lightning Network Daemon
Lightning Network Daemon (lnd) before 0.7 allows attackers to trigger loss of funds because of Incorrect Access Control.
-
Unscored —
c-lightning before 0.7.1 allows attackers to trigger loss of funds because of Incorrect Access Control. NOTE: README.md…
-
Unscored —
Multiple vulnerabilities exists in Aruba Instate before 4.1.3.0 and 4.2.3.1 due to insufficient validation of user-supp…
-
Unscored —
Cross-site scripting (XSS) vulnerability in infoware MapSuite MapAPI 1.0.x before 1.0.36 and 1.1.x before 1.1.49 allows…
-
Medium 4.8
Untrusted data can lead to DoS attack in MessagePack for C# and Unity
MessagePack for C# and Unity before version 1.9.11 and 2.1.90 has a vulnerability where untrusted data can lead to DoS attack due to hash collisions and stack overflow. Review the linked GitHub Security Advisory for more information and remediation steps.
-
Unscored —
Buffer overflow in Media Player Classic - Home Cinema (MPC-HC) before 1.7.0 allows remote attackers to execute arbitrar…
-
Unscored —
Stack-based buffer overflow in Media Player Classic - Home Cinema (MPC-HC) before 1.7.0.7858 allows remote attackers to…
-
Unscored —
Parallel::ForkManager module before 1.0.0 for Perl does not properly handle temporary files.
-
Unscored —
_is_safe in the File::Temp module for Perl does not properly handle symlinks.
-
Unscored —
The Batch::BatchRun module 1.03 for Perl does not properly handle temporary files.
-
Unscored —
ABRT might allow attackers to obtain sensitive information from crash reports.
-
High 7.5
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a speci…
-
Medium 4.3
An authorization issue was discovered in the Credential Manager feature in Zoho ManageEngine Remote Access Plus before …
-
Unscored —
Integer overflow in the Drive Execution Environment (DXE) phase in the Capsule Update feature in the UEFI implementatio…
-
Unscored —
Multiple integer overflows in the Pre-EFI Initialization (PEI) boot phase in the Capsule Update feature in the UEFI imp…
-
Unscored —
Evernote prior to 5.5.1 has insecure password change
-
Unscored —
LastPass prior to 2.5.1 has an insecure PIN implementation.
-
Unscored —
LastPass prior to 2.5.1 allows secure wipe bypass.