Archive

27 January 2020

Vulnerabilities first published on this day (UTC), newest first.

← December 2019 2020 / January /27 February 2020 →

All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

Unscored —

CVE-2013-2474 Public exploit EPSS 10%

Directory traversal vulnerability in AWS XMS 2.5 allows remote attackers to view arbitrary files via the 'what' paramet…

Jan 27, 2020
Unscored —

CVE-2013-2267 Public exploit

PHP Code Injection vulnerability in FUDforum Bulletin Board Software 3.0.4 could allow remote attackers to execute arbi…

Jan 27, 2020
Unscored —

CVE-2012-6448 Public exploit

Cross-site Scripting (XSS) in cPanel WebHost Manager (WHM) 11.34.0 allows remote attackers to inject arbitrary web scri…

Jan 27, 2020
Unscored —

CVE-2019-19143 Public exploit

TP-LINK TL-WR849N 0.9.1 4.16 devices do not require authentication to replace the firmware via a POST request to the cg…

Jan 27, 2020
Unscored —

CVE-2013-7390 Public exploit EPSS 75%

Unrestricted file upload vulnerability in AgentLogUploadServlet in ManageEngine DesktopCentral 7.x and 8.0.0 before bui…

Jan 27, 2020
Unscored —

CVE-2014-8741 Public exploit EPSS 77%

Directory traversal vulnerability in the GfdFileUploadServerlet servlet in Lexmark MarkVision Enterprise before 2.1 all…

Jan 27, 2020
Unscored —

CVE-2020-7949 Public exploit

schemasystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by…

Jan 27, 2020
Unscored —

CVE-2011-4558 Public exploit

Tiki 8.2 and earlier allows remote administrators to execute arbitrary PHP code via crafted input to the regexres and r…

Jan 27, 2020
Unscored —

CVE-2012-1495 Public exploit EPSS 80%

install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_use…

Jan 27, 2020
Unscored —

CVE-2012-1496 Public exploit

Local file inclusion in WebCalendar before 1.2.5.

Jan 27, 2020