Archive
13 February 2020
Vulnerabilities first published on this day (UTC), newest first.
123 results · Feed
-
Medium 5.4
PrestaShop Stored Cross-Site Scripting Vulnerability
PrestaShop before 1.4.11 allows Logistician, translators and other low level profiles/accounts to inject a persistent XSS vector on TinyMCE.
-
Unscored —
PrestaShop before 1.4.11 allows logout CSRF.
-
Unscored —
Cross-site Scripting (XSS) in EasyXDM before 2.4.18 allows remote attackers to inject arbitrary web script or html via …
-
Unscored —
RiskNet Acquirer before hotfix 6.0 b7+ADHOC-443 ApplicationServiceBean contains a service information disclosure.
-
Unscored —
QNAP VioCard 300 has hardcoded RSA private keys.
-
Unscored —
TRENDnet TS-S402 has a backdoor to enable TELNET.
-
Unscored —
Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts.
-
Unscored —
Internet TRiLOGI Server (unknown versions) could allow a local user to bypass security and create a local user account.
-
Unscored —
OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection.
-
High 8.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Moxa MGate 5105-MB-EI…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29…
-
High 7.8CVE-2020-8856 EPSS 20%
This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader …
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29…
-
High 7.8CVE-2020-8845 EPSS 19%
This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0…
-
High 7.8CVE-2020-8846 EPSS 20%
This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0…
-
High 7.8CVE-2020-8844 EPSS 24%
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.6.0.25…
-
Unscored —
Belkin n750 routers have a buffer overflow.
-
Unscored —
MobileIron VSP < 5.9.1 and Sentry < 5.0 has an insecure encryption scheme.
-
Unscored —
Microsys PROMOTIC 8.2.13 contains an ActiveX Control Start Buffer Overflow vulnerability which can lead to denial of se…
-
Unscored —
A denial of service vulnerability exists in some motherboard implementations of Intel e1000e/82574L network controller …
-
Unscored —
Multiple security bypass vulnerabilities in the editAnswer, deleteAnswer, addAnswer, and deletePoll functions in WordPr…
-
Unscored —
The Voatz application 2020-01-01 for Android allows only 100 million different PINs, which makes it easier for attacker…
-
Unscored —
In the Voatz application 2020-01-01 for Android, the amount of data transmitted during a single voter's vote depends on…
-
Unscored —
Multiple SQL injection vulnerabilities in CWPPoll.js in WordPress Poll Plugin 34.5 for WordPress allow attackers to exe…
-
Unscored —
Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before…
-
Unscored —
Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated…
-
Unscored —
Directory traversal vulnerability in node/utils/Minify.js in Etherpad 1.1.2 through 1.5.4 allows remote attackers to re…
-
Unscored —
A Denial of Service vulnerability exists in askpop3d 0.7.7 in free (pszQuery),
-
Unscored —
Zend_XmlRpc Class in Magento before 1.7.0.2 contains an information disclosure vulnerability.
-
Unscored —
A vulnerability exists in Netgear CG3100 devices before 3.9.2421.13.mp3 V0027 via an embed malicious script in an unspe…
-
Unscored —
A Privilege Escalation Vulnerability exists in Free Reprintables ArticleFR 11.06.2014 due to insufficient access restri…
-
Unscored —
Squirrelmail 4.0 uses the outdated MD5 hash algorithm for passwords.