Archive
12 February 2020
Vulnerabilities first published on this day (UTC), newest first.
117 results · Feed
-
High 7.7
XSS/Script injection vulnerability in matestack
matestack-ui-core (RubyGem) before 0.7.4 is vulnerable to XSS/Script injection. This vulnerability is patched in version 0.7.4.
-
Medium 4.2
An exploitable information disclosure vulnerability exists in the 'Secret Chats' functionality of Rakuten Viber on Andr…
-
Unscored —
A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 38…
-
Unscored —
LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2.
-
Unscored —
LinuxKI v6.0-1 and earlier is vulnerable to an XSS which is resolved in release 6.0-2.
-
Unscored —CVE-2019-18915 Public exploit
A potential security vulnerability has been identified with certain versions of HP System Event Utility prior to versio…
-
Unscored —
Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Multiple c…
-
Unscored —
Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Successful…
-
High 7.5
Expedition Migration Tool: Insufficient Cross Site Request Forgery protection.
Insufficient Cross-Site Request Forgery (XSRF) protection on Expedition Migration Tool allows remote unauthenticated attackers to hijack the authentication of administrators and to perform actions on the Expedition Migration Tool. This issue affects Expeditio…
-
Medium 4.7
GlobalProtect on MacOS: Local denial-of-service (DoS) vulnerability.
A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect software running on Mac OS allows authenticated local users to cause the Mac OS kernel to hang or crash. This issue affects GlobalProtect 5.0.5 and earlier versions of GlobalProtect 5…
-
Medium 6.8
Missing XML Validation in PAN-OS Web Interface
Missing XML validation vulnerability in the PAN-OS web interface on Palo Alto Networks PAN-OS software allows authenticated users to inject arbitrary XML that results in privilege escalation. This issue affects PAN-OS 8.1 versions earlier than PAN-OS 8.1.12 a…
-
Unscored —
irc_mode_channel_update in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers to cause a denial of s…
-
Unscored —
A Cross-Site Scripting (XSS) vulnerability exists in Tiki Wiki CMG Groupware 11.0 via the id paraZeroClipboard.swf, whi…
-
Unscored —
A Code Execution vulnerability exists in select.py when using python-mode 2012-12-19.
-
Unscored —
A Denial of Service (infinite loop) vulnerability exists in Avira AntiVir Engine before 8.2.12.58 via an unspecified fu…
-
Unscored —
TinyBrowser plugin for Joomla! before 1.5.13 allows arbitrary file upload via upload.php.
-
Unscored —CVE-2011-4906 Public exploit
Tiny browser in TinyMCE 3.0 editor in Joomla! before 1.5.13 allows file upload and arbitrary PHP code execution.
-
High 7.6
CredHub does not properly enable TLS for MySQL database connections
Cloud Foundry CredHub, versions prior to 2.5.10, connects to a MySQL database without TLS even when configured to use TLS. A malicious user with access to the network between CredHub and its MySQL database may eavesdrop on database connections and thereby gai…
-
Unscored —CVE-2020-8950 Public exploit
The AUEPLauncher service in Radeon AMD User Experience Program Launcher through 1.0.0.1 on Windows allows elevation of …
-
Medium 5.4
Under certain conditions ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP S/4HANA (SAP_BASIS ver…
-
Medium 5.8
Under some circumstances the SAML SSO implementation in the SAP NetWeaver (SAP_BASIS versions 702, 730, 731, 740 and SA…
-
High 7.5
SAP Host Agent, version 7.21, allows an attacker to cause a slowdown in processing of username/password-based authentic…
-
Medium 5.3
SAP Host Agent, version 7.21, allows an unprivileged user to read the shared memory or write to the shared memory by se…
-
Medium 6.1
Under certain conditions, ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP S/4HANA (SAP_BASIS ve…
-
High 7.2
SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious executables with r…
-
Medium 6.3
VAT Pro-Rata reports in SAP ERP (SAP_APPL versions 600, 602, 603, 604, 605, 606, 616 and SAP_FIN versions 617, 618, 700…
-
Medium 5.8
Certain vulnerable endpoints in SAP NetWeaver AS Java (Heap Dump Application), versions 7.30, 7.31, 7.40, 7.50, provide…
-
Medium 5.3
Certain settings page(s) in SAP Business Objects Business Intelligence Platform (CMC), version 4.2, generates error mes…
-
Medium 4.9
SAP NetWeaver (Guided Procedures), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate an…
-
Medium 4.3
SAP Mobile Platform, version 3.0, does not sufficiently validate an XML document accepted from an untrusted source whic…
-
High 7.2
SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious commands with root…
-
Medium 6.1
SAP NetWeaver (Knowledge Management ICE Service), versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker t…
-
Unscored —
Android SQLite Journal before 4.0.1 has an information disclosure vulnerability.
-
Unscored —CVE-2011-3336 Public exploit
regcomp in the BSD implementation of libc is vulnerable to denial of service due to stack exhaustion.
-
Unscored —
-
Unscored —
The Bluetooth stack in Android before 2.3.6 allows a physically proximate attacker to obtain contact information via an…
-
Unscored —
Gocloud S2A_WL 4.2.7.16471, S2A 4.2.7.17278, S2A 4.3.0.15815, S2A 4.3.0.17193, S3A K2P MTK 4.2.7.16528, S3A 4.3.0.16572…
-
Unscored —
Shaman 1.0.9: Users can add the line askforpwd=false to his shaman.conf file, without entering the root password in sha…
-
Unscored —
The Bluetooth Low Energy implementation on STMicroelectronics BLE Stack through 1.3.1 for STM32WB5x devices does not pr…
-
Unscored —
Invision Power Board (IPB) through 3.x allows admin account takeover leading to code execution.