Archive
February 2020
Vulnerabilities first published in this month (UTC), newest first.
153 results · Clear filters · Feed
-
Unscored —CVE-2020-9006 Public exploit
The Popup Builder plugin 2.2.8 through 2.6.7.6 for WordPress is vulnerable to SQL injection (in the sgImportPopups func…
-
Unscored —
A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, w…
-
Unscored —CVE-2016-2338 Public exploit
An exploitable heap overflow vulnerability exists in the Psych::Emitter start_document function of Ruby. In Psych::Emit…
-
Unscored —
Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before…
-
Unscored —
A Privilege Escalation Vulnerability exists in Free Reprintables ArticleFR 11.06.2014 due to insufficient access restri…
-
Unscored —CVE-2012-1500 Public exploit
Stored XSS vulnerability in UpdateFieldJson.jspa in JIRA 4.4.3 and GreenHopper before 5.9.8 allows an attacker to injec…
-
High 8.8CVE-2020-0022 Public exploit
In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds ca…
-
Unscored —CVE-2020-0014 Public exploit
It is possible for a malicious application to construct a TYPE_TOAST window manually and make that window clickable. Th…
-
Unscored —
LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2.
-
Unscored —CVE-2019-18915 Public exploit
A potential security vulnerability has been identified with certain versions of HP System Event Utility prior to versio…
-
Unscored —
TinyBrowser plugin for Joomla! before 1.5.13 allows arbitrary file upload via upload.php.
-
Unscored —CVE-2011-4906 Public exploit
Tiny browser in TinyMCE 3.0 editor in Joomla! before 1.5.13 allows file upload and arbitrary PHP code execution.
-
Unscored —CVE-2020-8950 Public exploit
The AUEPLauncher service in Radeon AMD User Experience Program Launcher through 1.0.0.1 on Windows allows elevation of …
-
Unscored —CVE-2011-3336 Public exploit
regcomp in the BSD implementation of libc is vulnerable to denial of service due to stack exhaustion.
-
Unscored —
functions_netflow.php in Artica Pandora FMS 7.0 allows remote attackers to execute arbitrary OS commands via shell meta…
-
Unscored —CVE-2013-2637 Public exploit
A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 …
-
Unscored —
IZON IP 2.0.2: hard-coded password vulnerability
-
Unscored —
ZPanel through 10.1.0 has Remote Command Execution
-
Unscored —
-
Unscored —CVE-2013-1410 Public exploit
Perforce P4web 2011.1 and 2012.1 has multiple XSS vulnerabilities
-
Unscored —CVE-2015-7890 Public exploit
Multiple buffer overflows in the esa_write function in /dev/seirenin the Exynos Seiren Audio driver, as used in Samsung…
-
Unscored —
WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability
-
Unscored —CVE-2020-8839 Public exploit
Stored XSS was discovered on CHIYU BF-430 232/485 TCP/IP Converter devices before 1.16.00, as demonstrated by the /if.c…
-
Unscored —CVE-2019-19194 Public exploit
The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation on Telink Semiconductor BLE SDK versions before N…
-
Unscored —CVE-2014-2560 Public exploit
The PhonerLite phone before 2.15 provides hashed credentials in a response to an invalid authentication challenge, whic…
-
Critical 9.8
JGit Improper Input Validation vulnerability
Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine all versions before 08-12-2014; libgit2 all versions up…
-
Unscored —
Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a per…
-
Unscored —CVE-2014-4968 Public exploit
The WebView class and use of the WebView.addJavascriptInterface method in the Boat Browser application 8.0 and 8.0.1 fo…
-
Unscored —CVE-2020-0753 Public exploit
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, ak…
-
Unscored —CVE-2020-0728 Public exploit
An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka '…
-
High 8.8
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle …
KEV Nov 3, 2021 -
High 7.8
An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka '…
KEV Nov 3, 2021 -
High 7.5
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…
KEV Nov 3, 2021 -
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windo…
-
Unscored —CVE-2020-0665 Public exploit
An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an …
-
Critical 9.8
A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles pag…
KEV Sep 18, 2024 -
Unscored —CVE-2012-1124 Public exploit
SQL injection vulnerability in search.php in phxEventManager 2.0 beta 5 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2012-2452 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in pragmaMx 1.x before 1.12.2 allow remote attackers to inject arbi…
-
Unscored —CVE-2012-2517 Public exploit
Cross-site scripting (XSS) vulnerability in PrestaShop before 1.4.9 allows remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2013-5582 Public exploit
Ammyy Admin 3.2 and earlier stores the client ID at a fixed memory location, which might make it easier for user-assist…