Archive
22 January 2020
Vulnerabilities first published on this day (UTC), newest first.
54 results · Feed
-
Medium 5.9
Observable Discrepancy in libsecp256k1-rs
A timing vulnerability in the Scalar::check_overflow function in Parity libsecp256k1-rs before 0.3.1 potentially allows an attacker to leak information via a side-channel attack.
-
Unscored —
An issue was discovered on Eaton 5P 850 devices. The Ubicacion SAI field allows XSS attacks by an administrator.
-
Unscored —
A stack-based buffer overflow in zap_parse_args in zap.c in zap in Ruckus Unleashed through 200.7.10.102.64 allows remo…
-
Unscored —CVE-2019-19842 Public exploit
emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST req…
-
Unscored —
emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST req…
-
Unscored —
A Cross-Site Scripting (XSS) vulnerability exists in the admin login screen in Phorum before 5.2.18.
-
Unscored —
WebKitGTK+ before 2.14.0: A use-after-free vulnerability can allow remote attackers to cause a DoS
-
Medium 6.5
Directory Traversal (Chroot Escape) vulnerability in uftpd
In uftpd before 2.11, it is possible for an unauthenticated user to perform a directory traversal attack using multiple different FTP commands and read and write to arbitrary locations on the filesystem due to the lack of a well-written chroot jail in compose…
-
Unscored —
Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote creden…
-
High 7.1
HTTP Request Smuggling: Content-Length Sent Twice in Waitress
Waitress through version 1.3.1 allows request smuggling by sending the Content-Length header twice. Waitress would header fold a double Content-Length header and due to being unable to cast the now comma separated value to an integer would set the Content-Len…
-
Unscored —
AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote code execution via a PO…
-
Unscored —
Directory Traversal in ruckus_cli2 in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote attacker to jai…
-
Unscored —
Gallery Plugin1.4 for WordPress has a Remote File Include Vulnerability
-
Medium 4.4
Rapid7 AppSpider Chrome Plugin Insufficient Session Expiration
The Chrome Plugin for Rapid7 AppSpider can incorrectly keep browser sessions active after recording a macro, even after a restart of the Chrome browser. This behavior could make future session hijacking attempts easier, since the user could believe a session …
-
Unscored —
A reverse proxy issue exists in FluxBB before 1.4.7 when FORUM_BEHIND_REVERSE_PROXY is enabled.
-
Unscored —
The SpamSpan module obfuscates email addresses to help prevent spambots from collecting them. This module contains a sp…
-
Unscored —
An Access Control vulnerability exists in the Facebook, Twitter, and Embedded plugins in Vanilla Forums before 2.0.17.9.
-
Unscored —
An issue exists in Vanilla Forums before 2.0.17.9 due to the way cookies are handled.
-
Unscored —
Cross-Site Request Forgery (CSRF) vulnerability exists in panel.php in UseBB before 1.0.12.
-
Unscored —CVE-2019-6146 Public exploit
It has been reported that cross-site scripting (XSS) is possible in Forcepoint Web Security, version 8.x, via host head…
-
Unscored —
The Elementor Page Builder plugin before 2.8.4 for WordPress does not sanitize data during creation of a new template.
-
Unscored —
A File Inclusion vulnerability exists in act parameter to admin.php in UseBB before 1.0.12.
-
Unscored —
A Cross-site Scripting (XSS) vulnerability exists in the Serendipity freetag plugin before 3.30 in the tagcloud paramet…
-
Unscored —
Multiple Cross-site Scripting (XSS) vulnerabilities exist in Joomla! through 1.7.0 in index.php in the search word, ext…
-
Unscored —
A Cross-site Request Forgery (CSRF) vulnerability exists in Advanced Electron Forums (AEF) through 1.0.9 due to inadequ…
-
Unscored —
The following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build 595 T2-Patch, HNMSWVMSL…
-
Unscored —
The following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build 595 T2-Patch, HNMSWVMSL…
-
Unscored —
The Calculated Fields Form plugin through 1.0.353 for WordPress suffers from multiple Stored XSS vulnerabilities presen…
-
Unscored —
A CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator (Software Version prior to V1.0.8.1…
-
Critical 9.8
Validation Bypass in schema-inspector
In schema-inspector before 1.6.9, a maliciously crafted JavaScript object can bypass the `sanitize()` and the `validate()` function used within schema-inspector.
-
Critical 9.8
BibTeX-Ruby vulnerable to OS command injection
BibTeX-ruby before 5.1.0 allows shell command injection due to unsanitized user input being passed directly to the built-in Ruby Kernel.open method through BibTeX.open.
-
Unscored —
The wpa_supplicant system service in Samsung Galaxy Gear series allows an unprivileged process to fully control the Wi-…
-
Unscored —
The wemail_consumer_service (from the built-in application wemail) in Samsung Galaxy Gear series allows an unprivileged…
-
Unscored —
Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. T…
-
Unscored —
The wnoti system service in Samsung Galaxy Gear series allows an unprivileged process to take over the internal notific…
-
Unscored —
The SoundServer/FocusServer system services in Tizen allow an unprivileged process to perform media-related system acti…
-
Unscored —
The system-popup system service in Tizen allows an unprivileged process to perform popup-related system actions, due to…
-
Unscored —
The bt/bt_core system service in Tizen allows an unprivileged process to create a system user interface and control the…
-
Unscored —
The BlueZ system service in Tizen allows an unprivileged process to partially control Bluetooth or acquire sensitive in…
-
Unscored —
The PulseAudio system service in Tizen allows an unprivileged process to control its A2DP MediaEndpoint, due to imprope…