Archive
4 February 2020
Vulnerabilities first published on this day (UTC), newest first.
9 results · Clear filters · Feed
-
Unscored —
A CSRF vulnerability in the Tutor LMS plugin before 1.5.3 for WordPress can result in an attacker approving themselves …
-
Unscored —
Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attacker…
-
Unscored —CVE-2013-7055 Public exploit
D-Link DIR-100 4.03B07 has PPTP and poe information disclosure
-
Unscored —CVE-2013-7054 Public exploit
D-Link DIR-100 4.03B07: cli.cgi XSS
-
Unscored —CVE-2013-7053 Public exploit
D-Link DIR-100 4.03B07: cli.cgi CSRF
-
Unscored —
D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script
-
Unscored —
D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters
-
Unscored —CVE-2012-5686 Public exploit
ZPanel 10.0.1 has insufficient entropy for its password reset process.
-
Medium 5.7CVE-2020-5236 Public exploit
Catastrophic backtracking in regex allows Denial of Service in Waitress
Waitress version 1.4.2 allows a DOS attack When waitress receives a header that contains invalid characters. When a header like "Bad-header: xxxxxxxxxxxxxxx\x10" is received, it will cause the regular expression engine to catastrophically backtrack causing th…