Archive
17 January 2020
Vulnerabilities first published on this day (UTC), newest first.
34 results · Feed
-
Unscored —
An arbitrary code execution vulnerability exists in the Trend Micro Security 2019 (v15) consumer family of products whi…
-
Unscored —
A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160 and 2019 (v15) consum…
-
Unscored —
A memory usage vulnerability exists in Trend Micro Password Manager 3.8 that could allow an attacker with access and pe…
-
Unscored —
A RootCA vulnerability found in Trend Micro Password Manager for Windows and macOS exists where the localhost.key of Ro…
-
Unscored —
An issue was discovered in Amcrest Web Server 2.520.AC00.18.R 2017-06-29 WEB 3.2.1.453504. The login page responds with…
-
Unscored —
The chained-quiz plugin 1.1.8.1 for WordPress has reflected XSS via the wp-admin/admin-ajax.php total_questions paramet…
-
Unscored —
Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop…
-
Medium 5.3
CSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux
Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module) endpoints. Only non-authenticated endpoints are vulnerable b…
-
Unscored —
Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a deserialization vulnerability if an index file of a p…
-
Unscored —
Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a cross site scripting (XSS) vulnerability when generat…
-
Medium 6.5
It was found that the Red Hat Enterprise Linux 8 kpatch update did not include the complete fix for CVE-2018-12207. A f…
-
Unscored —
VMware Workspace ONE SDK and dependent mobile application updates address sensitive information disclosure vulnerabilit…
-
Unscored —
Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior …
-
Unscored —
Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior …
-
Unscored —
Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior …
-
Unscored —CVE-2020-6862 Public exploit
V6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability. Unauthorized users could l…
-
Unscored —
A Stored Client Side Template Injection (CSTI) with Angular was discovered in the SolarWinds Orion Platform 2019.2 HF1 …
-
Unscored —
A Reflected Client Side Template Injection (CSTI) with Angular was discovered in the SolarWinds Orion Platform 2019.2 H…
-
Unscored —
Improper permissions in Intel(R) DAAL before version 2020 Gold may allow an authenticated user to potentially enable in…
-
Unscored —
Improper access control in driver for Intel(R) VTune(TM) Amplifier for Windows* before update 8 may allow an authentica…
-
Unscored —CVE-2019-14615 Public exploit
Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may …
-
Unscored —
Improper permissions in the installer for Intel(R) RWC 3 for Windows before version 7.010.009.000 may allow an authenti…
-
Unscored —
Improper access control in the installer for Intel(R) Chipset Device Software INF Utility before version 10.1.18 may al…
-
Unscored —
Uncontrolled search path element in the installer for Intel(R) SNMP Subagent Stand-Alone for Windows* may allow an auth…
-
Unscored —
An issue was discovered in Maarch RM before 2.5. A privilege escalation vulnerability allows an authenticated user with…
-
Unscored —
An issue was discovered in Maarch RM before 2.5. A path traversal vulnerability allows an unauthenticated remote attack…
-
Unscored —
Feldtech easescreen Crystal 9.0 Web-Services 9.0.1.16265 allows Stored XSS via the Debug-Log and Display-Log components…
-
Medium 6.5
XSS in distri and version parameter in openQA
openQA before commit c172e8883d8f32fced5e02f9b6faaacc913df27b was vulnerable to XSS in the distri and version parameter. This was reported through the bug bounty program of Offensive Security
-
High 8.8
keystone_json_assignment backend granted access to any project for users in user-project-map.json
The keystone-json-assignment package in SUSE Openstack Cloud 8 before commit d7888c75505465490250c00cc0ef4bb1af662f9f every user listed in the /etc/keystone/user-project-map.json was assigned full "member" role access to every project. This allowed these user…
-
High 8.4
Insecure API port exposed to all Master Node guest containers
The docker-kubic package in SUSE CaaS Platform 3.0 before 17.09.1_ce-7.6.1 provided access to an insecure API locally on the Kubernetes master node.
-
Unscored —
In Gallagher Command Centre Server v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90…
-
Unscored —
In Gallagher Command Centre Server versions of v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 pr…
-
Unscored —CVE-2019-19142 Public exploit
Intelbras WRN240 devices do not require authentication to replace the firmware via a POST request to the incoming/Firmw…
-
Critical 9.8CVE-2019-17361 EPSS 15%
SaltStack Salt is vulnerable to command injection
In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host.