Archive
3 February 2020
Vulnerabilities first published on this day (UTC), newest first.
7 results · Clear filters · Feed
-
Critical 9.8
eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.
-
Unscored —
The Web Management of TP-Link TP-SG105E V4 1.0.0 Build 20181120 devices allows an unauthenticated attacker to reboot th…
-
Unscored —CVE-2020-8547 Public exploit
phpList 3.5.0 allows type juggling for admin login bypass because == is used instead of === for password hashes, which …
-
Unscored —CVE-2013-2624 Public exploit
Telean before 1.3.1 contains a full path disclosure vulnerability which could allow remote attackers to obtain sensitiv…
-
Unscored —CVE-2013-2623 Public exploit
Cross-site Scripting (XSS) in Telaen before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via th…
-
Unscored —
Open Redirection Vulnerability in the redir.php script in Telaen before 1.3.1 allows remote attackers to redirect victi…
-
Critical 9.8
SQL injection in Django
Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter (e.g., in Django applications that offer downloads of data as a series of rows with a user-specified column delimiter).…