Archive
January 2020
Vulnerabilities first published in this month (UTC), newest first.
1,661 results · Feed
-
Unscored —
HUAWEI Mate 20 smart phones with versions earlier than 10.0.0.175(C00E70R3P8) have an insufficient authentication vulne…
-
Unscored —CVE-2019-19411 Scanner template
USG9500 with versions of V500R001C30SPC100, V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100,…
-
Unscored —
apt-cacher-ng through 3.3 allows local users to obtain sensitive information by hijacking the hardcoded TCP port. The /…
-
Unscored —
log.c in Squid Analysis Report Generator (sarg) through 2.3.11 allows local privilege escalation. By default, it uses a…
-
Critical 9.8
papercrop does not properly handle crop input
The papercrop gem before 0.3.0 for Ruby on Rails does not properly handle crop input.
-
Unscored —
The forDNN.UsersExportImport module before 1.2.0 for DNN (formerly DotNetNuke) allows an unprivileged user to import (c…
-
Unscored —CVE-2020-6857 Public exploit
CarbonFTP v1.4 uses insecure proprietary password encryption with a hard-coded weak encryption key. The key for local F…
-
Unscored —
Parallels 13 uses cleartext HTTP as part of the update process, allowing man-in-the-middle attacks. Users of out-of-dat…
-
Unscored —
An issue was discovered in Simplejobscript.com SJS before 1.65. There is unauthenticated SQL injection via the search e…
-
Unscored —
tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.
-
Medium 5.4
A vulnerability was discovered in all quay-2 versions before quay-3.0.0, in the Quay web GUI where POST requests includ…
-
Unscored —
An Arbitrary File Upload issue in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated u…
-
Unscored —
In DIMO YellowBox CRM before 6.3.4, Path Traversal in images/Apparence (dossier=../) and servletrecuperefichier (docume…
-
Unscored —
Path Traversal in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to browse th…
-
Unscored —
Incorrect Access Control in AfficheExplorateurParam() in DIMO YellowBox CRM before 6.3.4 allows a standard authenticate…
-
Unscored —CVE-2012-5190 Public exploit
Prizm Content Connect 5.1 has an Arbitrary File Upload Vulnerability
-
Unscored —
mIRC prior to 7.22 has a message leak because chopping of outbound messages is mishandled.
-
Unscored —
websitebaker prior to and including 2.8.1 has an authentication error in backup module.
-
Unscored —
-
Unscored —
-
Unscored —
Mozilla Firefox prior to 3.6 has a DoS vulnerability due to an issue in the validation of certificates.
-
Unscored —
Mozilla Firefox through 1.5.0.3 has a vulnerability in processing the content-length header
-
Unscored —
Sonoff TH 10 and 16 devices with firmware 6.6.0.21 allows XSS via the Friendly Name 1 field (after a successful login w…
-
Unscored —
A remote code execution (RCE) vulnerability exists in qdPM 9.1 and earlier. An attacker can upload a malicious PHP code…
-
Unscored —
Locked regions may be modified through other interfaces in secure boot loader image due to improper access control. in …
-
Unscored —
Possible buffer overflow issue in error processing due to improper validation of array index value in Snapdragon Auto, …
-
Unscored —
Use after free while processing eeprom query as there is a chance to not unlock mutex after error occurs in Snapdragon …
-
Unscored —
Possible stack-use-after-scope issue in NFC usecase for card emulation in Snapdragon Auto, Snapdragon Industrial IOT, S…
-
Unscored —
Heap buffer overflow can occur while parsing invalid MKV clip which is not standard and have invalid vorbis codec data …
-
Unscored —
String format issue will occur while processing HLOS data as there is no user input validation to ensure inputs are pro…
-
Unscored —
While parsing invalid super index table, elements within super index table may exceed total chunk size and invalid data…
-
Unscored —
Possible buffer overflow when byte array receives incorrect input from reading source as array is not null terminated i…
-
Unscored —
Integer overflow occurs while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon …
-
Unscored —
The device may enter into error state when some tool or application gets failure at 1st buffer map all and performs 2nd…
-
Unscored —
Possible null pointer dereference issue in location assistance data processing due to missing null check on resources b…
-
Unscored —
Buffer overflow occur while playing the clip which is nonstandard due to lack of check of size duration in Snapdragon A…
-
Unscored —
Buffer overflow occur while playing the clip which is nonstandard due to lack of offset length check in Snapdragon Auto…
-
Unscored —
Buffer overflow occurs while processing invalid MKV clip, which has invalid EBML size in Snapdragon Auto, Snapdragon Co…
-
Unscored —
Null pointer exception can happen while parsing invalid MKV clip where cue information is parsed before segment informa…
-
Unscored —
Buffer overflow can occur while processing clip due to lack of check of object size before parsing in Snapdragon Auto, …