Archive
February 2020
Vulnerabilities first published in this month (UTC), newest first.
1,406 results · Feed
-
Unscored —
Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are v…
-
Unscored —
QEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are vulnerable to potential …
-
Unscored —CVE-2013-5945 Public exploit
Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.…
-
Unscored —
An issue was discovered in MISP before 2.4.121. ACLs for discussion threads were mishandled in app/Controller/ThreadsCo…
-
Unscored —
An issue was discovered in MISP before 2.4.121. The Galaxy view contained an incorrectly sanitized search string in app…
-
Unscored —
gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an app…
-
Unscored —
A vulnerability has been identified in SCALANCE S602 (All versions < V4.1), SCALANCE S612 (All versions < V4.1), SCALAN…
-
Unscored —
NetApp Snap Creator Framework before 4.3P1 allows remote authenticated users to conduct clickjacking attacks via unspec…
-
Unscored —CVE-2019-14514 Public exploit
An issue was discovered in Microvirt MEmu all versions prior to 7.0.2. A guest Android operating system inside the MEmu…
-
Unscored —
participants-database.php in the Participants Database plugin 1.9.5.5 and previous versions for WordPress has a time-ba…
-
Unscored —
An ni_dhcp4_fsm_process_dhcp4_packet memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to caus…
-
Unscored —
Syska Smart Bulb devices through 2017-08-06 receive RGB parameters over cleartext Bluetooth Low Energy (BLE), leading t…
-
Unscored —
The Bluetooth Low Energy implementation on Microchip Technology BluSDK Smart through 6.2 for ATSAMB11 devices does not …
-
Unscored —
The Bluetooth Low Energy peripheral implementation on Texas Instruments SIMPLELINK-CC2640R2-SDK through 3.30.00.20 and …
-
Unscored —
The Bluetooth Low Energy implementation on Texas Instruments SDK through 3.30.00.20 for CC2640R2 devices does not prope…
-
Unscored —
An issue was discovered in TestLink 1.9.19. The relation_type parameter of the lib/requirements/reqSearch.php endpoint …
-
Unscored —
The Bluetooth Low Energy implementation on Dialog Semiconductor SDK through 1.0.14.1081 for DA1468x devices responds to…
-
Unscored —
The Bluetooth Low Energy implementation on Dialog Semiconductor SDK through 5.0.4 for DA14580/1/2/3 devices does not pr…
-
Unscored —
The Bluetooth Low Energy (BLE) stack implementation on Cypress PSoC 4 through 3.62 devices does not properly restrict t…
-
Unscored —
The Bluetooth Low Energy (BLE) stack implementation on the NXP KW41Z (based on the MCUXpresso SDK with Bluetooth Low En…
-
Critical 9.8
Deserialization of Untrusted Data in jackson-databind
FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.
-
Critical 9.4CVE-2019-17137 Public exploit
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR AC12…
-
Medium 4.3
This vulnerability allows local attackers to disclose sensitive information on affected installations of Samsung Knox 1…
-
Medium 5.5
This vulnerability allows network adjacent attackers to execute arbitrary code on affected installations of Xiaomi Brow…
-
High 7.5
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Xiaomi Browser Prio…
-
Unscored —
A CSRF vulnerability exists in the File Types component of Web File Manager in Rumpus FTP 8.2.9.1 that allows an attack…
-
Unscored —
A CSRF vulnerability exists in the Upload Center Forms Component of Web File Manager in Rumpus FTP 8.2.9.1. This could …
-
Unscored —
A HTTP Response Splitting vulnerability was identified in the Web Settings Component of Web File Manager in Rumpus FTP …
-
Unscored —
A CSRF vulnerability exists in the Block Clients component of Web File Manager in Rumpus FTP 8.2.9.1 that could allow a…
-
Unscored —
A CSRF vulnerability exists in the Event Notices Settings of Web File Manager in Rumpus FTP 8.2.9.1. An attacker can cr…
-
Unscored —
A Cookie based reflected XSS exists in the Web File Manager of Rumpus FTP Server 8.2.9.1, related to RumpusLoginUserNam…
-
Unscored —
A CSRF vulnerability exists in the Web File Manager's Create/Delete Accounts functionality of Rumpus FTP Server 8.2.9.1…
-
Unscored —
A CSRF vulnerability exists in the Web Settings of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation of this vulnera…
-
Unscored —
WordPress plugin wp-cleanfix has Remote Code Execution
-
Unscored —CVE-2013-2108 Public exploit
WordPress WP Cleanfix Plugin 2.4.4 has CSRF
-
Unscored —
A CSRF vulnerability exists in the FTP Settings of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation of this vulnera…
-
Unscored —
A CSRF vulnerability exists in the Folder Sets Settings of Web File Manager in Rumpus FTP 8.2.9.1. This allows an attac…
-
Unscored —
A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1. By expl…
-
Unscored —
BlackBerry PlayBook before 2.1 has an Information Disclosure Vulnerability via a Web browser component error
-
Unscored —
A CSRF vulnerability exists in the Web File Manager's Network Setting functionality of Rumpus FTP Server 8.2.9.1. By ex…