Archive
January 2020
Vulnerabilities first published in this month (UTC), newest first.
1,661 results · Feed
-
Medium 5.3
Untrusted Search Path vulnerability in EPSecurityService.exe (VA-3500)
An Untrusted Search Path vulnerability in EPSecurityService.exe as used in Bitdefender Endpoint Security Tools versions prior to 6.6.11.163 allows an attacker to load an arbitrary DLL file from the search path. This issue affects: Bitdefender EPSecurityServic…
-
High 8.1
Bitdefender BOX 2 bootstrap download_image command injection vulnerability
A command injection vulnerability has been discovered in the bootstrap stage of Bitdefender BOX 2, versions 2.1.47.42 and 2.1.53.45. The API method `/api/download_image` unsafely handles the production firmware URL supplied by remote servers, leading to arbit…
-
High 8.3
Stack-Based Overflow vulnerability in Belkin WeMo Insights Switch
A Stack-based Buffer Overflow vulnerability in libbelkin_api.so component of Belkin WeMo Insight Switch firmware allows a local attacker to obtain code execution on the device. This issue affects: Belkin WeMo Insight Switch firmware version 2.00.11396 and pri…
-
Unscored —
On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysC…
-
Unscored —
On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {"topicurl":"setting/getSanvas"…
-
High 7.5
HTTP Request Smuggling in Netty
Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869.
-
Unscored —CVE-2020-7949 Public exploit
schemasystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by…
-
Unscored —
meshsystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by c…
-
Unscored —
meshsystem.dll in Valve Dota 2 before 7.23e allows remote attackers to achieve code execution or denial of service by c…
-
Unscored —
rendersystemdx9.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service…
-
Unscored —
The Phonemes mode in Pwgen 2.06 generates predictable passwords, which makes it easier for context-dependent attackers …
-
Unscored —
The Scribunto extension for MediaWiki allows remote attackers to obtain the rollback token and possibly other sensitive…
-
Unscored —
The to_char function in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4…
-
Unscored —
Stack-based buffer overflow in the *printf function implementations in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9…
-
Unscored —
Multiple buffer overflows in contrib/pgcrypto in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.…
-
Unscored —
PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 does not…
-
Unscored —
PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows r…
-
Unscored —
A Local Privilege Escalation issue was discovered in Avast Secure Browser 76.0.1659.101. The vulnerability is due to an…
-
Unscored —
GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate.
-
Medium 6.1
Zenario CMS vulnerable to CRLF injection
CRLF injection vulnerability in Zend\Mail (Zend_Mail) in Zend Framework before 1.12.12, 2.x before 2.3.8, and 2.4.x before 2.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the hea…
-
Unscored —
NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is used.
-
Unscored —CVE-2011-4558 Public exploit
Tiki 8.2 and earlier allows remote administrators to execute arbitrary PHP code via crafted input to the regexres and r…
-
Unscored —
install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_use…
-
Unscored —
IrfanView FlashPix Plugin 4.3.4 0 has an Integer Overflow Vulnerability
-
Unscored —
-
Unscored —CVE-2012-1496 Public exploit
Local file inclusion in WebCalendar before 1.2.5.
-
Unscored —
-
Unscored —
Pinboard 1.0.6 theme for Wordpress has XSS.
-
Unscored —
Wiz 5.0.3 has a user mode write access violation
-
Unscored —
Proxmox VE prior to 3.2: 'AccessControl.pm' User Enumeration Vulnerability
-
Medium 4.9
Get-task-allow entitlement via BDLDaemon on macOS
An Incorrect Default Permissions vulnerability in the BDLDaemon component of Bitdefender AV for Mac allows an attacker to elevate permissions to read protected directories. This issue affects: Bitdefender AV for Mac versions prior to 8.0.0.
-
Unscored —
WordPress Portable phpMyAdmin Plugin has an authentication bypass vulnerability
-
High 8.3
Bitdefender BOX v2 bootstrap update_setup command execution vulnerability (VA-2226)
An exploitable command execution vulnerability exists in the recovery partition of Bitdefender BOX 2, version 2.0.1.91. The API method `/api/update_setup` does not perform firmware signature checks atomically, leading to an exploitable race condition (TOCTTOU…
-
Unscored —
libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the enco…
-
Unscored —
OSSIM before 4.3.3.1 has tele_compress.php path traversal vulnerability
-
Medium 5.2
Untrusted Search Path vulnerability in Bitdefender Total Security 2020 (VA-5895)
An Untrusted Search Path vulnerability in bdserviceshost.exe as used in Bitdefender Total Security 2020 allows an attacker to execute arbitrary code. This issue does not affect: Bitdefender Total Security versions prior to 24.0.12.69.
-
Unscored —
AVB MOTU devices through 2020-01-22 allow /.. Directory Traversal, as demonstrated by reading the /etc/passwd file.
-
High 8.1
SQL injection in ui-server/app/models/diary_entry.rb in SUSE Studio onsite
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in susestudio-ui-server of SUSE Studio onsite allows remote attackers with admin privileges in Studio to alter SQL statements, allowing for extraction and mo…
-
Low 3.7
Insecure handling of repodata and packages in SUSE Studio onlite
A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MITM connections to the repositories, which allows the modification of packages received over these connections. This issue affects: SUSE Stu…
-
Unscored —
The netprint App for iOS 3.2.3 and earlier does not verify X.509 certificates from servers, which allows man-in-the-mid…