Archive
13 January 2020
Vulnerabilities first published on this day (UTC), newest first.
43 results · Feed
-
Unscored —
An XXE vulnerability in JnlpSupport in Yet Another Java Service Wrapper (YAJSW) 12.14, as used in NSA Ghidra and other …
-
Unscored —
An issue was discovered on Cayin SMP-PRO4 devices. A user can discover a saved password by viewing the URL after a Conn…
-
Unscored —
An issue was discovered on Cayin SMP-PRO4 devices. They allow image_preview.html?filename= reflected XSS.
-
Unscored —
A file-extension filtering vulnerability in Proofpoint Enterprise Protection (PPS / PoD), in the unpatched versions of …
-
Unscored —
An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 12.3 through 12.6.1. It allows Den…
-
Unscored —
An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 12.6. It has Incorrect Access Cont…
-
Unscored —
An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 10.8 through 12.6.1. It has Incorr…
-
Unscored —
An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 11.4 through 12.6.1. It has Incorr…
-
Unscored —
An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 11.0 through 12.6. It allows Uncon…
-
Unscored —
An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 9.1 through 12.6.1. It has Incorre…
-
Unscored —
An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 8.13 through 12.6.1. It has Incorr…
-
Unscored —
An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 5.1 through 12.6.1. It has Incorre…
-
Unscored —
An issue was discovered in GitLab Enterprise Edition (EE) 8.9.0 through 12.6.1. Using the project import feature, it wa…
-
Unscored —CVE-2012-4750 Public exploit
A Code Execution vulnerability exists in the memcpy function when processing AMF requests in Ezhometech EzServer 7.0, w…
-
Unscored —
A Privilege Escalation vulnerability exists in the unquoted Service Binary in SDPAgent or SDBAgent in Safend Data Prote…
-
Unscored —
A Privilege Escalation vulnerability exists in the SDBagent service in Safend Data Protector Agent 3.4.5586.9772, which…
-
Critical 9.8
HashBrown CMS RCE
A remote code execution issue was discovered in HashBrown CMS through 1.3.3. Server/Entity/Deployer/GitDeployer.js has a Service.AppService.exec call that mishandles the URL, repository, username, and password.
-
Unscored —
A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3. An editor user can…
-
Unscored —
An issue exists in Safend Data Protector Agent 3.4.5586.9772 in the securitylayer.log file in the logs.9972 directory, …
-
Unscored —
SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 has weak slurmdbd.conf permissions.
-
Unscored —
SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges.
-
High 7.5
Improper Verification of Cryptographic Signature in PySAML2
PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping (XSW). The signature information and the node/object that is signed can be in diffe…
-
Unscored —
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persist…
-
Unscored —
An encryption key vulnerability on Mitel SIP-DECT wireless devices 8.0 and 8.1 could allow an attacker to launch a man-…
-
Unscored —
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persist…
-
Unscored —
Reflected XSS through an IMG element in Cerberus FTP Server prior to versions 11.0.1 and 10.0.17 allows a remote attack…
-
Unscored —CVE-2019-20210 Scanner template
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Reflect…
-
Unscored —
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow nsecure…
-
Unscored —
Multiple Insecure Direct Object Reference vulnerabilities in includes/core/class-files.php in the Ultimate Member plugi…
-
Unscored —
In Avast Premium Security 19.8.2393, attackers can send a specially crafted request to the local web server run by Avas…
-
Unscored —
XSS in the Video Downloader component before 1.5 of Avast Secure Browser 77.1.1831.91 and AVG Secure Browser 77.0.1790.…
-
Unscored —CVE-2019-19547 Public exploit
Symantec Endpoint Detection and Response (SEDR), prior to 4.3.0, may be susceptible to a cross site scripting (XSS) iss…
-
Unscored —
Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation
-
Unscored —
Mozilla Firefox before 3.6 is vulnerable to XSS via the rendering of Cascading Style Sheets
-
Unscored —
LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability
-
Unscored —CVE-2014-5381 Public exploit
Grand MA 300 allows a brute-force attack on the PIN.
-
Unscored —CVE-2014-5380 Public exploit
Grand MA 300 allows retrieval of the access PIN from sniffed data.
-
Unscored —
ManageEngine EventLog Analyzer version 7 through 9.9 build 9002 has a Credentials Disclosure Vulnerability. Fixed versi…
-
Unscored —
Zoho ManageEngine EventLog Analyzer versions 7 through 9.9 build 9002 have a database Information Disclosure Vulnerabil…
-
Unscored —
WordPress Advanced Access Manager Plugin before 2.8.2 has an Arbitrary File Overwrite Vulnerability