Archive
10 February 2020
Vulnerabilities first published on this day (UTC), newest first.
58 results · Feed
-
Unscored —
NetApp Snap Creator Framework before 4.3P1 allows remote authenticated users to conduct clickjacking attacks via unspec…
-
Unscored —CVE-2019-14514 Public exploit
An issue was discovered in Microvirt MEmu all versions prior to 7.0.2. A guest Android operating system inside the MEmu…
-
Unscored —
participants-database.php in the Participants Database plugin 1.9.5.5 and previous versions for WordPress has a time-ba…
-
Unscored —
An ni_dhcp4_fsm_process_dhcp4_packet memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to caus…
-
Unscored —
Syska Smart Bulb devices through 2017-08-06 receive RGB parameters over cleartext Bluetooth Low Energy (BLE), leading t…
-
Unscored —
The Bluetooth Low Energy implementation on Microchip Technology BluSDK Smart through 6.2 for ATSAMB11 devices does not …
-
Unscored —
The Bluetooth Low Energy peripheral implementation on Texas Instruments SIMPLELINK-CC2640R2-SDK through 3.30.00.20 and …
-
Unscored —
The Bluetooth Low Energy implementation on Texas Instruments SDK through 3.30.00.20 for CC2640R2 devices does not prope…
-
Unscored —
An issue was discovered in TestLink 1.9.19. The relation_type parameter of the lib/requirements/reqSearch.php endpoint …
-
Unscored —
The Bluetooth Low Energy implementation on Dialog Semiconductor SDK through 1.0.14.1081 for DA1468x devices responds to…
-
Unscored —
The Bluetooth Low Energy implementation on Dialog Semiconductor SDK through 5.0.4 for DA14580/1/2/3 devices does not pr…
-
Unscored —
The Bluetooth Low Energy (BLE) stack implementation on Cypress PSoC 4 through 3.62 devices does not properly restrict t…
-
Unscored —
The Bluetooth Low Energy (BLE) stack implementation on the NXP KW41Z (based on the MCUXpresso SDK with Bluetooth Low En…
-
Critical 9.8
Deserialization of Untrusted Data in jackson-databind
FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.
-
Critical 9.4CVE-2019-17137 Public exploit
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR AC12…
-
Medium 4.3
This vulnerability allows local attackers to disclose sensitive information on affected installations of Samsung Knox 1…
-
Medium 5.5
This vulnerability allows network adjacent attackers to execute arbitrary code on affected installations of Xiaomi Brow…
-
High 7.5
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Xiaomi Browser Prio…
-
Unscored —
A CSRF vulnerability exists in the File Types component of Web File Manager in Rumpus FTP 8.2.9.1 that allows an attack…
-
Unscored —
A CSRF vulnerability exists in the Upload Center Forms Component of Web File Manager in Rumpus FTP 8.2.9.1. This could …
-
Unscored —
A HTTP Response Splitting vulnerability was identified in the Web Settings Component of Web File Manager in Rumpus FTP …
-
Unscored —
A CSRF vulnerability exists in the Block Clients component of Web File Manager in Rumpus FTP 8.2.9.1 that could allow a…
-
Unscored —
A CSRF vulnerability exists in the Event Notices Settings of Web File Manager in Rumpus FTP 8.2.9.1. An attacker can cr…
-
Unscored —
A Cookie based reflected XSS exists in the Web File Manager of Rumpus FTP Server 8.2.9.1, related to RumpusLoginUserNam…
-
Unscored —
A CSRF vulnerability exists in the Web File Manager's Create/Delete Accounts functionality of Rumpus FTP Server 8.2.9.1…
-
Unscored —
A CSRF vulnerability exists in the Web Settings of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation of this vulnera…
-
Unscored —
WordPress plugin wp-cleanfix has Remote Code Execution
-
Unscored —CVE-2013-2108 Public exploit
WordPress WP Cleanfix Plugin 2.4.4 has CSRF
-
Unscored —
A CSRF vulnerability exists in the FTP Settings of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation of this vulnera…
-
Unscored —
A CSRF vulnerability exists in the Folder Sets Settings of Web File Manager in Rumpus FTP 8.2.9.1. This allows an attac…
-
Unscored —
A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1. By expl…
-
Unscored —
BlackBerry PlayBook before 2.1 has an Information Disclosure Vulnerability via a Web browser component error
-
Unscored —
A CSRF vulnerability exists in the Web File Manager's Network Setting functionality of Rumpus FTP Server 8.2.9.1. By ex…
-
Unscored —
-
Unscored —
HP Systems Insight Manager before 7.0 allows a remote user on adjacent network to access information
-
Unscored —
Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the group_list page.
-
Unscored —
The clientconf.html and detailbw.html pages in x3 in cPanel & WHM 11.34.0 (build 8) have a XSS vulnerability.
-
Unscored —CVE-2014-5083 Public exploit
A Command Execution vulnerability exists in Sphider before 1.3.6 due to insufficient sanitization of fwrite to conf.php…
-
Unscored —
An issue was discovered in Polycom Web Management Interface G3/HDX 8000 HD with Durango 2.6.0 4740 software and embedde…
-
Unscored —
The HTTP API in Prismview System 9 11.10.17.00 and Prismview Player 11 13.09.1100 allows remote code execution by uploa…