Archive
January 2020
Vulnerabilities first published in this month (UTC), newest first.
184 results · Clear filters · Feed
-
Unscored —CVE-2019-9465 Public exploit
In the Titan M handling of cryptographic operations, there is a possible information disclosure due to an unusual root …
-
Unscored —
Multiple SQL vulnerabilities exist in planning.php, user_list.php, projets.php, user_groupes.php, and groupe_list.php i…
-
Unscored —CVE-2013-5657 Public exploit
AultWare pwStore 2010.8.30.0 has DoS via an empty HTTP request
-
Unscored —CVE-2013-5656 Public exploit
FuzeZip 1.0.0.131625 has a Local Buffer Overflow vulnerability
-
Unscored —CVE-2014-8674 Public exploit
Multiple Cross-Site Scripting (XSS) vulnerabilities exist in Simple Online Planning (SOPlanning) before 1.33 via the do…
-
Unscored —
A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell.
-
Unscored —
An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a…
-
Unscored —CVE-2015-4039 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the WP Membership plugin 1.2.3 for WordPress allow remote authen…
-
Unscored —
Gila CMS 1.11.8 allows /admin/sql?query= SQL Injection.
-
Critical 9.8
Cisco Data Center Network Manager Authentication Bypass Vulnerabilities
Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. …
-
High 7.2
Cisco Data Center Network Manager Command Injection Vulnerabilities
Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker with administrative privileges on the DCNM application to inject arbitrary commands on the underlying operati…
-
High 7.2
Cisco Data Center Network Manager SQL Injection Vulnerabilities
Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device. To exploit these vulnerabilities, an attacker would …
-
Medium 5.4CVE-2019-15999 Public exploit
Cisco Data Center Network Manager JBoss EAP Unauthorized Access Vulnerability
A vulnerability in the application environment of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to gain unauthorized access to the JBoss Enterprise Application Platform (JBoss EAP) on an affected device. The vulnerabil…
-
Critical 9.8
Cisco Data Center Network Manager Authentication Bypass Vulnerabilities
Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. …
-
Critical 9.8
Cisco Data Center Network Manager Authentication Bypass Vulnerabilities
Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. …
-
Unscored —CVE-2019-20354 Public exploit
The web application component of piSignage before 2.6.4 allows a remote attacker (authenticated as a low-privilege user…
-
Unscored —
PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple Persistent XSS vulnerabilities.
-
Unscored —
PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple SQL injection vulnerabilities: multiple pages a…
-
Unscored —
Unrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers to execute arbitrary c…
-
Unscored —CVE-2014-5140 Public exploit
The bindReplace function in the query factory in includes/classes/database.php in Loaded Commerce 7 does not properly h…
-
Unscored —CVE-2012-5878 Public exploit
Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary comma…
-
Unscored —CVE-2013-3619 Public exploit
Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT_X9_…
-
Critical 9.8
Pivotal Spring Framework contains unsafe Java deserialization methods
Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data. Depending on how the library is implemented within a product, this issue may or not occur, and authenticatio…
-
Unscored —CVE-2019-20204 Public exploit
The Postie plugin 1.9.40 for WordPress allows XSS, as demonstrated by a certain payload with jaVasCript:/* at the begin…