Archive
23 January 2020
Vulnerabilities first published on this day (UTC), newest first.
78 results · Feed
-
Unscored —
Incorrect username validation in the registration process of CTFd v2.0.0 - v2.2.2 allows an attacker to take over an ar…
-
Unscored —
WordPress WP GPX Maps Plugin 1.1.21 allows remote attackers to execute arbitrary PHP code via improper file upload.
-
Unscored —CVE-2012-6663 Public exploit
General Electric D20ME devices are not properly configured and reveal plaintext passwords.
-
Unscored —
Citrix XenServer 4.1, 6.0, 5.6 SP2, 5.6 Feature Pack 1, 5.6 Common Criteria, 5.6, 5.5, 5.0, and 5.0 Update 3 contains a…
-
Unscored —CVE-2012-5340 Public exploit
SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corr…
-
Unscored —
NULL Pointer Dereference in PowerTCP WebServer for ActiveX 1.9.2 and earlier allows remote attackers to cause a denial …
-
Unscored —
Philips Hue Bridge model 2.X prior to and including version 1935144020 contains a Heap-based Buffer Overflow when handl…
-
High 7.5
In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unauthenticate…
-
Medium 5.5
In IXP EasyInstall 6.2.13723, it is possible to temporarily disable UAC by using the Agent Service on a client system. …
-
High 8.8
In IXP EasyInstall 6.2.13723, there is Lateral Movement (using the Agent Service) against other users on a client syste…
-
Critical 9.9
In IXP EasyInstall 6.2.13723, there is Remote Code Execution via weak permissions on the Engine Service share. The defa…
-
Critical 10.0
In IXP EasyInstall 6.2.13723, there is Remote Code Execution via the Agent Service. An unauthenticated attacker can com…
-
High 7.5
In IXP EasyInstall 6.2.13723, there are cleartext credentials in network communication on TCP port 20050 when using the…
-
Medium 6.1
Plone Open Redirect Vulnerability
An open redirect on the login form (and possibly other places) in Plone 4.0 through 5.2.1 allows an attacker to craft a link to a Plone Site that, when followed, and possibly after login, will redirect to an attacker's site.
-
Medium 5.4
Plone cross site scripting (XSS)
An XSS issue in the title field in Plone 5.0 through 5.2.1 allows users with a certain privilege level to insert JavaScript that will be executed when other users access the site.
-
High 8.8
Plone Privilege Escallation
plone.restapi in Plone 5.2.0 through 5.2.1 allows users with a certain privilege level to escalate their privileges up to the highest level.
-
High 8.8
Plone SQL Injection Vulnerability
SQL Injection in DTML or in connection objects in Plone 4.0 through 5.2.1 allows users to perform unwanted SQL queries. (This is a problem in Zope.)
-
High 7.5
Plone allows weak passwords
Missing password strength checks on some forms in Plone 4.3 through 5.2.0 allow users to set weak passwords, leading to easier cracking.
-
Critical 9.8
Plone Unauthenticated Write Vulnerability
A privilege escalation issue in plone.app.contenttypes in Plone 4.3 through 5.2.1 allows users to PUT (overwrite) some content without needing write permission.
-
Unscored —
Memory leak in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause a denial of service (…
-
Unscored —
Off-by-one error in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause a denial of serv…
-
Unscored —
Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process …
-
Unscored —
A Denial of Service vulnerability exists in the WRITE_C function in the msg_server.exe module in SAP NetWeaver 2004s, 7…
-
Unscored —
The ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service (in…
-
Unscored —
Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2 allows remote a…
-
Unscored —
A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending spec…
-
Unscored —
IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 …
-
Unscored —
EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3…
-
Unscored —
Freeciv before 2.3.3 allows remote attackers to cause a denial of service via a crafted packet.
-
Unscored —CVE-2019-15707 Public exploit
An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow adm…
-
High 7.5
Improper Resource Shutdown or Release in HashiCorp Vault
HashiCorp Vault Enterprise 0.11.0 through 1.3.1 fails, in certain circumstances, to revoke dynamic secrets for a mount in a deleted namespace. Fixed in 1.3.2.
-
Unscored —
An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow adm…
-
Unscored —
An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. Certain HTTP security…
-
Unscored —
An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. There is a user enume…
-
Unscored —
An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. The server allows rem…
-
Unscored —
An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. There is a CORS misco…
-
Unscored —
An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. There is stored XSS i…
-
Unscored —
An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. CSRF can be used to s…
-
Unscored —
Improper permission or value checking in the CLI console may allow a non-privileged user to obtain Fortinet FortiOS pla…