Skip to content
OpenAdvisories

Archive

4 February 2020

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • Unscored —
    CVE-2020-8615 Public exploit Scanner template EPSS 11%

    A CSRF vulnerability in the Tutor LMS plugin before 1.5.3 for WordPress can result in an attacker approving themselves …

  • Unscored —
    CVE-2013-2678 Public exploit EPSS 17%

    Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attacker…

  • Unscored —
    CVE-2013-7055 Public exploit

    D-Link DIR-100 4.03B07 has PPTP and poe information disclosure

  • Unscored —
    CVE-2013-7054 Public exploit

    D-Link DIR-100 4.03B07: cli.cgi XSS

  • Unscored —
    CVE-2013-7053 Public exploit

    D-Link DIR-100 4.03B07: cli.cgi CSRF

  • Unscored —
    CVE-2013-7052 Public exploit EPSS 25%

    D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script

  • Unscored —
    CVE-2013-7051 Public exploit EPSS 16%

    D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters

  • Unscored —
    CVE-2012-5686 Public exploit

    ZPanel 10.0.1 has insufficient entropy for its password reset process.

  • Medium 5.7
    CVE-2020-5236 Public exploit

    Catastrophic backtracking in regex allows Denial of Service in Waitress

    Waitress version 1.4.2 allows a DOS attack When waitress receives a header that contains invalid characters. When a header like "Bad-header: xxxxxxxxxxxxxxx\x10" is received, it will cause the regular expression engine to catastrophically backtrack causing th…