Archive
January 2020
Vulnerabilities first published in this month (UTC), newest first.
1,661 results · Feed
-
Unscored —
The (1) my_popenv_impl and (2) my_spawnv functions in src/condor_utils/my_popen.cpp and the (3) systemCommand function …
-
Unscored —CVE-2012-2226 Public exploit
Invision Power Board before 3.3.1 fails to sanitize user-supplied input which could allow remote attackers to obtain se…
-
Unscored —CVE-2012-1915 Public exploit
EllisLab CodeIgniter 2.1.2 allows remote attackers to bypass the xss_clean() Filter and perform XSS attacks.
-
Unscored —CVE-2019-18859 Public exploit
Digi AnywhereUSB 14 allows XSS via a link for the Digi Page.
-
Unscored —
NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the abil…
-
High 7.6
A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows authenticated users with ba…
-
Unscored —
The BrowserID (Mozilla Persona) module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authenti…
-
Medium 5.4
A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.15, allows authenticated users with ba…
-
Unscored —
The Simplenews module 6.x-1.x before 6.x-1.4, 6.x-2.x before 6.x-2.0-alpha4, and 7.x-1.x before 7.x-1.0-rc1 for Drupal …
-
Unscored —CVE-2012-1261 Public exploit
Cross-site scripting (XSS) vulnerability in cgi-bin/scrut_fa_exclusions.cgi in Plixer International Scrutinizer NetFlow…
-
Unscored —CVE-2012-1260 Public exploit
Cross-site scripting (XSS) vulnerability in cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow A…
-
Unscored —CVE-2012-1259 Public exploit
Multiple SQL injection vulnerabilities in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and po…
-
Unscored —CVE-2012-1258 Public exploit
cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer before 9.0.1.19899 does not validate…
-
Unscored —
A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security…
-
Unscored —
GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting …
-
Unscored —
HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A (firm…
-
Unscored —
Certain HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F2…
-
High 7.5
Server-Side Request Forgery (SSRF) in Apache Olingo
Apache Olingo versions 4.0.0 to 4.7.0 provide the AsyncRequestWrapperImpl class which reads a URL from the Location header, and then sends a GET or DELETE request to this URL. It may allow to implement a SSRF attack. If an attacker tricks a client to connect …
-
Unscored —
A potential security vulnerability has been identified in the software solution HP Access Control versions prior to 16.…
-
Unscored —
An issue was found in Samsung Mobile Print (Android) versions prior to 4.08.007. A potential security vulnerability cau…
-
Unscored —
A potential security vulnerability has been identified with certain HP InkJet printers. The vulnerability could be expl…
-
Critical 9.6
A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows a CSRF attack to enable mai…
-
Unscored —
There is a weak algorithm vulnerability in some Huawei products. The affected products use the RSA algorithm in the SSL…
-
Unscored —
HUAWEI Mate 20 Pro smartphones versions earlier than 10.0.0.175(C00E69R3P8) have an improper authentication vulnerabili…
-
Medium 5.4
IBM Jazz Reporting Service (JRS) 6.0.6.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted…
-
Unscored —
HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139(C00E133R3P1) have an improper authentication vulnerability. …
-
Unscored —
Huawei Honor Magic2 mobile phones with versions earlier than 10.0.0.175(C00E59R2P11) have an information leak vulnerabi…
-
Unscored —
Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an authenticated attacker to gain root execution privileg…
-
Unscored —
An exposed Telnet Service on the Billion Smart Energy Router SG600R2 with firmware v3.02.rc6 allows a local network att…
-
Unscored —
XSS in the DHCP lease-status table in Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an attacker to inje…
-
Unscored —
netflow_get_stats in functions_netflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary …
-
Medium 6.1
An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kerne…
-
Unscored —
AgileBits 1Password through 1.0.9.340 allows security feature bypass
-
Unscored —
BSS Continuity CMS 4.2.22640.0 has an Authentication Bypass vulnerability
-
Unscored —
BSS Continuity CMS 4.2.22640.0 has a Remote Code Execution vulnerability due to unauthenticated file upload
-
Unscored —
BSS Continuity CMS 4.2.22640.0 has a Remote Denial Of Service vulnerability
-
High 7.5
Publify vulnerable to DoS attack
Publify before 8.0.1 is vulnerable to a Denial of Service attack
-
Unscored —
Unify OpenStage / OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web ba…
-
Unscored —
Unify OpenStage/OpenScape Desk Phone IP SIP before V3 R3.11.0 has an authentication bypass in the default mode of the W…
-
High 7.5
Ansible unsafe evaluation of some strings
Ansible prior to 1.5.4 mishandles the evaluation of some strings.