Archive
February 2020
Vulnerabilities first published in this month (UTC), newest first.
153 results · Clear filters · Feed
-
Unscored —CVE-2009-4067 Public exploit
Buffer overflow in the auerswald_probe function in the Auerswald Linux USB driver for the Linux kernel before 2.6.27 al…
-
Unscored —
NextGEN Gallery plugin before 1.9.13 for WordPress: ngggallery.php file upload
-
Unscored —
A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute ar…
-
Unscored —
An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, …
-
Unscored —
An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and …
-
Unscored —CVE-2014-8347 Public exploit
An Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll in Filemaker Pro 13.03 …
-
Unscored —CVE-2013-5945 Public exploit
Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.…
-
Unscored —CVE-2019-14514 Public exploit
An issue was discovered in Microvirt MEmu all versions prior to 7.0.2. A guest Android operating system inside the MEmu…
-
Critical 9.8
Deserialization of Untrusted Data in jackson-databind
FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.
-
Critical 9.4CVE-2019-17137 Public exploit
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR AC12…
-
Unscored —CVE-2013-2108 Public exploit
WordPress WP Cleanfix Plugin 2.4.4 has CSRF
-
Unscored —CVE-2014-5083 Public exploit
A Command Execution vulnerability exists in Sphider before 1.3.6 due to insufficient sanitization of fwrite to conf.php…
-
Unscored —CVE-2014-5084 Public exploit
A Command Execution vulnerability exists in Sphider Pro 3.2 due to insufficient sanitization of fwrite, which could let…
-
Unscored —CVE-2014-5085 Public exploit
A Command Execution vulnerability exists in Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, wh…
-
Unscored —CVE-2014-5086 Public exploit
A Command Execution vulnerability exists in Sphider Pro, and Sphider Plus 3.2 due to insufficient sanitization of fwrit…
-
Unscored —CVE-2019-20059 Public exploit
payment_manage.ajax.php and various *_manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.4 directly insert values…
-
Unscored —CVE-2020-8825 Public exploit
index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS.
-
Unscored —
The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service…
-
High —
jQuery File Upload Plugin Unrestricted file upload vulnerability
Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Creative Solutions Creative Contact Form (formerly Sexy Contact Form) before 1.0.0 for WordPress and before 2.0.1 for Joom…
-
Unscored —
The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager before 11.9 build 11912, …
-
Unscored —CVE-2014-2225 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Ubiquiti Networks UniFi Controller before 3.2.1 allow rem…
-
Unscored —CVE-2011-3642 Public exploit
Cross-site scripting (XSS) vulnerability in Flowplayer Flash 3.2.7 through 3.2.16, as used in the News system (news) ex…
-
High 7.5
Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page.…
KEV Nov 3, 2021 -
Unscored —CVE-2014-5087 Public exploit
A vulnerability exists in Sphider Search Engine prior to 1.3.6 due to exec calls in admin/spiderfuncs.php, which could …
-
Unscored —
A vulnerability exits in Status2K 2.5 Server Monitoring Software via the multies parameter to includes/functions.php, w…
-
Unscored —CVE-2014-5288 Public exploit
A CSRF Vulnerability exists in Kemp Load Master before 7.0-18a via unspecified vectors in administrative pages.
-
Unscored —
A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.c…
-
High 7.0
TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for di…
KEV Nov 3, 2021 -
Unscored —
HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed
-
Unscored —
ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution
-
Unscored —
Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerability
-
Unscored —
vTiger CRM 5.3 and 5.4: 'files' Upload Folder Arbitrary PHP Code Execution Vulnerability
-
Unscored —CVE-2013-0192 Public exploit
File Disclosure in SMF (SimpleMachines Forum) <= 2.0.3: Forum admin can read files such as the database config.
-
Unscored —
WordPress WP Super Cache Plugin 1.2 has Remote PHP Code Execution
-
Unscored —CVE-2019-14041 Public exploit
During listener modified response processing, a buffer overrun occurs due to lack of buffer size verification when upda…
-
Unscored —CVE-2019-14040 Public exploit
Using memory after being freed in qsee due to wrong implementation can lead to unexpected behavior such as execution of…
-
High 7.8
An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerabilit…
KEV Nov 3, 2021 -
Unscored —
An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient privileges could abuse the Auto…
-
Unscored —
An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauth…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Cisco Linksys WRT110 allows remote attackers to hijack the authentic…