Archive
January 2020
Vulnerabilities first published in this month (UTC), newest first.
184 results · Clear filters · Feed
-
Unscored —CVE-2020-5509 Public exploit
PHPGurukul Car Rental Project v1.0 allows Remote Code Execution via an executable file in an upload of a new profile im…
-
Unscored —CVE-2013-7185 Public exploit
PotPlayer 1.5.40688: .avi File Memory Corruption
-
Unscored —CVE-2012-4750 Public exploit
A Code Execution vulnerability exists in the memcpy function when processing AMF requests in Ezhometech EzServer 7.0, w…
-
Unscored —CVE-2019-19547 Public exploit
Symantec Endpoint Detection and Response (SEDR), prior to 4.3.0, may be susceptible to a cross site scripting (XSS) iss…
-
Unscored —
LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability
-
Unscored —CVE-2014-5381 Public exploit
Grand MA 300 allows a brute-force attack on the PIN.
-
Unscored —CVE-2014-5380 Public exploit
Grand MA 300 allows retrieval of the access PIN from sniffed data.
-
Unscored —
ManageEngine EventLog Analyzer version 7 through 9.9 build 9002 has a Credentials Disclosure Vulnerability. Fixed versi…
-
Unscored —
Zoho ManageEngine EventLog Analyzer versions 7 through 9.9 build 9002 have a database Information Disclosure Vulnerabil…
-
Unscored —
A Privilege Escalation vulnerability exists in Viscosity 1.4.1 on Mac OS X due to a path name validation issue in the s…
-
Unscored —CVE-2019-18194 Public exploit
TotalAV 2020 4.14.31 has a quarantine flaw that allows privilege escalation. Exploitation uses an NTFS directory juncti…
-
Unscored —CVE-2014-5093 Public exploit
Status2k does not remove the install directory allowing credential reset.
-
Unscored —CVE-2014-5092 Public exploit
Status2k allows Remote Command Execution in admin/options/editpl.php.
-
Unscored —CVE-2011-4595 Public exploit
Pretty-Link WordPress plugin 1.5.2 has XSS
-
Unscored —CVE-2013-6231 Public exploit
SpagoBI before 4.1 has Privilege Escalation via an error in the AdapterHTTP script
-
Unscored —
sphider prior to 1.3.6, sphider-pro prior to 3.2, and sphider-plus prior to 3.2 allow authentication bypass
-
Critical 9.8
languageOptions.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version) allows unauthenticated attackers to r…
-
High 8.8
phpMyAdmin SQL injection in user accounts page
In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access …
-
Unscored —CVE-2012-3810 Public exploit
Samsung Kies before 2.5.0.12094_27_11 has registry modification.
-
Unscored —CVE-2012-3809 Public exploit
Samsung Kies before 2.5.0.12094_27_11 has arbitrary directory modification.
-
Unscored —CVE-2012-3808 Public exploit
Samsung Kies before 2.5.0.12094_27_11 has arbitrary file modification.
-
Unscored —
Samsung Kies before 2.5.0.12094_27_11 has arbitrary file execution.
-
Unscored —CVE-2012-2226 Public exploit
Invision Power Board before 3.3.1 fails to sanitize user-supplied input which could allow remote attackers to obtain se…
-
Unscored —CVE-2012-1915 Public exploit
EllisLab CodeIgniter 2.1.2 allows remote attackers to bypass the xss_clean() Filter and perform XSS attacks.
-
Unscored —CVE-2019-18859 Public exploit
Digi AnywhereUSB 14 allows XSS via a link for the Digi Page.
-
Unscored —
NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the abil…
-
Unscored —CVE-2012-1261 Public exploit
Cross-site scripting (XSS) vulnerability in cgi-bin/scrut_fa_exclusions.cgi in Plixer International Scrutinizer NetFlow…
-
Unscored —CVE-2012-1260 Public exploit
Cross-site scripting (XSS) vulnerability in cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow A…
-
Unscored —CVE-2012-1259 Public exploit
Multiple SQL injection vulnerabilities in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and po…
-
Unscored —CVE-2012-1258 Public exploit
cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer before 9.0.1.19899 does not validate…
-
Unscored —
netflow_get_stats in functions_netflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary …
-
Unscored —
Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker…
-
Unscored —CVE-2020-0001 Public exploit
In getProcessRecordLocked of ActivityManagerService.java isolated apps are not handled correctly. This could lead to lo…
-
Unscored —CVE-2014-5287 Public exploit
A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input …
-
Unscored —CVE-2014-2072 Public exploit
Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks
-
Unscored —CVE-2020-0009 Public exploit
In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. Thi…
-
Unscored —CVE-2020-6170 Public exploit
An authentication bypass vulnerability on Genexis Platinum-4410 v2.1 P4410-V2 1.28 devices allows attackers to obtain c…
-
High 8.3
There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to …
-
High 8.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N rou…
-
Unscored —CVE-2020-5842 Public exploit
Codoforum 4.8.3 allows XSS in the user registration page: via the username field to the index.php?u=/user/register URI.…