Archive
3 February 2020
Vulnerabilities first published on this day (UTC), newest first.
36 results · Feed
-
Critical 9.8
eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.
-
High 7.9
Broadcom wl driver is vulnerable to heap buffer overflow
The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. If the vendor information element data length is larger than 164 bytes, a heap buffer overflow is triggered in wlc_wpa_plumb_gtk. In the worst case scenario, by sending specially-crafted WiF…
-
High 7.9
Broadcom wl driver is vulnerable to heap buffer overflow
The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. By supplying a vendor information element with a data length larger than 32 bytes, a heap buffer overflow is triggered in wlc_wpa_sup_eapol. In the worst case scenario, by sending specially-…
-
Unscored —
eG Manager 7.1.2 allows authentication bypass via a com.egurkha.EgLoginServlet?uname=admin&upass=&accessKey=eGm0n1t0r r…
-
Unscored —
eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet (aka the Forgot Password feat…
-
Medium 6.1
Bromium client - out of bound read results in race condition causing Kernel memory leaks or denial of service
Bromium client version 4.0.3.2060 and prior to 4.1.7 Update 1 has an out of bound read results in race condition causing Kernel memory leaks or denial of service.
-
Unscored —
Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attacke…
-
Medium 6.1
auth0-lock vulnerable to XSS via unsanitized placeholder property
Auth0 Lock before 11.21.0 allows XSS when additionalSignUpFields is used with an untrusted placeholder.
-
Unscored —
A Cross-origin vulnerability exists in WebKit in Apple Safari before 10.0.1 when processing location attributes, which …
-
Unscored —
Brother MFC-9970CDW 1.10 firmware L devices contain a security bypass vulnerability which allows physically proximate a…
-
Unscored —
The J-BusinessDirectory extension before 5.2.9 for Joomla! allows Reverse Tabnabbing. In some configurations, the link …
-
Low 2.9
IBM StoredIQ 7.6.0.17 through 7.6.0.20 could disclose sensitive information to a local user due to data in certain dire…
-
High 7.2
IBM SDK, Java Technology Edition Version 7.0.0.0 through 7.0.10.55, 7.1.0.0 through 7.1.4.55, and 8.0.0.0 through 8.0.6…
-
Unscored —
Stored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an attacker performing malicious…
-
Unscored —
Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords.
-
Unscored —
TP-LINK TL-WR1043ND V1_120405 devices contain an unspecified denial of service vulnerability.
-
Unscored —
massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegrat…
-
Unscored —
The Web Management of TP-Link TP-SG105E V4 1.0.0 Build 20181120 devices allows an unauthenticated attacker to reboot th…
-
Unscored —CVE-2020-8547 Public exploit
phpList 3.5.0 allows type juggling for admin login bypass because == is used instead of === for password hashes, which …
-
Medium 4.8
kubectl cp allows symlink directory traversal
The Kubernetes kubectl cp command in versions 1.1-1.12, and versions prior to 1.13.11, 1.14.7, and 1.15.4 allows a combination of two symlinks provided by tar output of a malicious container to place a file outside of the destination directory specified in th…
-
Unscored —
Global.py in AIL framework 2.8 allows path traversal.
-
Unscored —
An issue was discovered in phpABook 0.9 Intermediate. On the login page, if one sets a userInfo cookie with the value o…
-
Unscored —
An issue was discovered in PRTG 7.x through 19.4.53. Due to insufficient access control on local registry keys for the …
-
Unscored —
TinyWebGallery (TWG) 1.8.9 and earlier contains a full path disclosure vulnerability which allows remote attackers to o…
-
Unscored —CVE-2013-2624 Public exploit
Telean before 1.3.1 contains a full path disclosure vulnerability which could allow remote attackers to obtain sensitiv…
-
Unscored —CVE-2013-2623 Public exploit
Cross-site Scripting (XSS) in Telaen before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via th…
-
Unscored —
Cross-site Scripting (XSS) in UebiMiau 2.7.11 and earlier allows remote attackers to inject arbitrary web script or HTM…
-
Unscored —
Prototype 1.6.0.1 allows remote authenticated users to forge ticket creation (on behalf of other user accounts) via a m…
-
Unscored —
Open Redirection Vulnerability in the redir.php script in Telaen before 1.3.1 allows remote attackers to redirect victi…
-
Medium 5.3
DCE extension for Typo3 Discloses Environment Information
The default configuration in the Dynamic Content Elements (dce) extension before 0.11.5 for TYPO3 allows remote attackers to obtain sensitive installation environment information by reading the update check request.
-
Unscored —
In Unisys Stealth (core) 3.4.108.0, 3.4.209.x, 4.0.027.x and 4.0.114, key material inadvertently logged under certain c…
-
Critical 9.8
SQL injection in Django
Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter (e.g., in Django applications that offer downloads of data as a series of rows with a user-specified column delimiter).…
-
Medium 6.1
ServiSign Windows Versions- Arbitrary File Access
An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary files on target system via crafted API parameter.
-
High 8.3
ServiSign Windows Versions- Arbitrary File Deletion
An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary files on target system via crafted API parameter.
-
High 8.3
ServiSign Windows Versions- Remote Code Execution via LoadLibrary
A Remote Code Execution(RCE) vulnerability exists in some designated applications in ServiSign security plugin, as long as the interface is captured, attackers are able to launch RCE and executes arbitrary command on target system via malicious crafted script…
-
Unscored —
nsak64.sys in Norman Malware Cleaner 2.08.08 allows users to call arbitrary kernel functions because the passing of fun…