Archive
25 February 2020
Vulnerabilities first published on this day (UTC), newest first.
12 results · Clear filters · Feed
-
High 8.8
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows CSRF.
-
High 7.2
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows XSS.
-
High 8.8
An exploitable format string vulnerability exists in the iw_console conio_writestr functionality of the Moxa AWK-3131A …
-
High 7.5
An exploitable denial-of-service vulnerability exists in ServiceAgent functionality of the Moxa AWK-3131A, firmware ver…
-
High 8.0
An exploitable authentication bypass vulnerability exists in the hostname processing of the Moxa AWK-3131A firmware ver…
-
High 7.5
The usage of hard-coded cryptographic keys within the ServiceAgent binary allows for the decryption of captured traffic…
-
High 8.8
An exploitable privilege escalation vulnerability exists in the iw_console functionality of the Moxa AWK-3131A firmware…
-
High 7.2
An exploitable command injection vulnerability exists in the hostname functionality of the Moxa AWK-3131A firmware vers…
-
High 8.8
An exploitable command injection vulnerability exists in the iw_webs functionality of the Moxa AWK-3131A firmware versi…
-
High 8.8
An exploitable command injection vulnerability exists in the iwwebs functionality of the Moxa AWK-3131A firmware versio…
-
High 8.1
Origin Validation Error in Magento 2
An issue was discovered in the CardGate Payments plugin through 2.0.30 for Magento 2. Lack of origin authentication in the IPN callback processing function in Controller/Payment/Callback.php allows an attacker to remotely replace critical plugin settings (mer…
-
High 8.1CVE-2020-8819 Public exploit
CardGate Payments plugin for WooCommerce does not validate request origin
An issue was discovered in the CardGate Payments plugin through 3.1.15 for WooCommerce. Lack of origin authentication in the IPN callback processing function in cardgate/cardgate.php allows an attacker to remotely replace critical plugin settings (merchant ID…