Skip to content
OpenAdvisories

Archive

28 January 2020

Vulnerabilities first published on this day (UTC), newest first.

← December 2019 2020 / January /28 February 2020 →
  1. 15
  2. 253
  3. 353
  4. 44
  5. 515
  6. 663
  7. 734
  8. 8103
  9. 974
  10. 1040
  11. 118
  12. 12 
  13. 1343
  14. 14107
  15. 15278
  16. 1631
  17. 1734
  18. 181
  19. 196
  20. 2010
  21. 2176
  22. 2254
  23. 2378
  24. 2466
  25. 2512
  26. 2631
  27. 27111
  28. 28110
  29. 2954
  30. 3056
  31. 3151
All Critical High Medium Low Exploited only Public exploit

22 results · Clear filters · Feed

  • Unscored —
    CVE-2020-8424 Public exploit

    Cups Easy (Purchase & Inventory) 1.0 is vulnerable to CSRF that leads to admin account takeover via passwordmychange.ph…

  • Unscored —
    CVE-2020-8425 Public exploit

    Cups Easy (Purchase & Inventory) 1.0 is vulnerable to CSRF that leads to admin account deletion via userdelete.php.

  • Unscored —
    CVE-2013-1603 Public exploit EPSS 16%

    An Authentication vulnerability exists in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, D…

  • Unscored —
    CVE-2013-1602 Public exploit EPSS 15%

    An Information Disclosure vulnerability exists due to insufficient validation of authentication cookies for the RTSP se…

  • Unscored —
    CVE-2013-1601 Public exploit EPSS 12%

    An Information Disclosure vulnerability exists due to a failure to restrict access on the lums.cgi script when processi…

  • Unscored —
    CVE-2013-3214 Public exploit EPSS 85%

    vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'.

  • Unscored —
    CVE-2013-3212 Public exploit

    vtiger CRM 5.4.0 and earlier contain local file-include vulnerabilities in 'customerportal.php' which allows remote att…

  • High 8.8
    CVE-2020-8417 Public exploit EPSS 12%

    The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import m…

  • Unscored —
    CVE-2013-1600 Public exploit EPSS 19%

    An Authentication Bypass vulnerability exists in upnp/asf-mp4.asf when streaming live video in D-Link TESCO DCS-2121 1.…

  • Unscored —
    CVE-2013-1599 Public exploit EPSS 40%

    A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in D-Link IP Cameras DCS-3411/3430 fir…

  • Unscored —
    CVE-2013-2748 Public exploit EPSS 13%

    Belkin Wemo Switch before WeMo_US_2.00.2176.PVT could allow remote attackers to upload arbitrary files onto the system.

  • Unscored —
    CVE-2013-2714 Public exploit

    Cross-site Scripting (XSS) in WordPress podPress Plugin 8.8.10.13 could allow remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2012-6610 Public exploit EPSS 11%

    Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote authenticated users to execute arbitr…

  • Unscored —
    CVE-2013-4861 Public exploit

    Directory traversal vulnerability in cgi-bin/cmh/get_file.sh in MiCasaVerde VeraLite with firmware 1.5.408 allows remot…

  • Unscored —
    CVE-2013-4862 Public exploit

    MiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which allows remote authenticated users t…

  • Unscored —
    CVE-2013-4863 Public exploit EPSS 12%

    The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows (1) remote attackers to execute …

  • Unscored —
    CVE-2013-4864 Public exploit

    MiCasaVerde VeraLite with firmware 1.5.408 allows remote attackers to send HTTP requests to intranet servers via the ur…

  • Unscored —
    CVE-2013-4865 Public exploit

    Cross-site request forgery (CSRF) vulnerability in upgrade_step2.sh in MiCasaVerde VeraLite with firmware 1.5.408 allow…

  • Unscored —
    CVE-2013-2571 Public exploit EPSS 16%

    Iris 3.8 before build 1548, as used in Xpient point of sale (POS) systems, allows remote attackers to execute arbitrary…

  • Medium 5.4
    CVE-2020-7934 Public exploit

    Liferay Portal Vulnerable to Persistent Cross-Site Scripting (XSS) in MyAccountPortlet

    In LifeRay Portal CE 7.1.0 through 7.2.1 GA2, the First Name, Middle Name, and Last Name fields for user accounts in MyAccountPortlet are all vulnerable to a persistent XSS issue. Any user can modify these fields with a particular XSS payload, and it will be …

    com.liferay.portal:release.portal.bom Maven
  • Unscored —
    CVE-2020-7799 Public exploit EPSS 20%

    An issue was discovered in FusionAuth before 1.11.0. An authenticated user, allowed to edit e-mail templates (Home -> S…

  • Unscored —
    CVE-2019-10779 Public exploit

    All versions of stroom:stroom-app before 5.5.12 and all versions of the 6.0.0 branch before 6.0.25 are affected by Cros…