Archive
February 2020
Vulnerabilities first published in this month (UTC), newest first.
1,406 results · Feed
-
Unscored —
The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view…
-
Unscored —CVE-2013-2684 Public exploit
Cross-site Scripting (XSS) in Cisco Linksys E4200 1.0.05 Build 7 devices allows remote attackers to inject arbitrary we…
-
Unscored —
Cisco Linksys E4200 1.0.05 Build 7 devices contain an Information Disclosure Vulnerability which allows remote attacker…
-
Unscored —
Schmid ZI 620 V400 VPN 090 routers allow an attacker to execute OS commands as root via shell metacharacters to an entr…
-
Unscored —
An Information Disclosure vulnerability exists in the my config file in NEtGEAR WGR614 v7 and v9, which could let a mal…
-
Unscored —
An Authentication vulnerability exists in NETGEAR WGR614 v7 and v9 due to a hardcoded credential used for serial progra…
-
Critical 9.8
An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in includ…
KEV Nov 3, 2021 -
High 7.5
Dell EMC Unity, Dell EMC Unity XT, and Dell EMC UnityVSA versions prior to 5.0.2.0.5.009 contain a Denial of Service vu…
-
Medium 6.2
Dell EMC ECS versions prior to 3.4.0.1 contain an XSS vulnerability. A remote authenticated malicious user could exploi…
-
High 7.5
Dell EMC Isilon OneFS versions 8.1.2, 8.1.0.4, 8.1.0.3, and 8.0.0.7 contain a vulnerability in some configurations. An …
-
Unscored —
A vulnerability exists in Arctic Torrent 1.4 via unspecified vectors in .torrent file handling, which could let a malic…
-
Unscored —CVE-2012-6307 Public exploit
A vulnerability exists in JPEGsnoop 1.5.2 due to an unspecified issue in JPEG file handling, which could let a maliciou…
-
Unscored —
A vulnerability exists in HCView (aka Hardcoreview) 1.4 due to a write access violation with a GIF file.
-
Unscored —
Command Injection vulnerability exists via a CSRF in DD-WRT 24-sp2 from specially crafted configuration values containi…
-
Unscored —
pmm-server in Percona Monitoring and Management (PMM) 2.2.x before 2.2.1 allows unauthenticated denial of service.
-
Unscored —
MikroTik WinBox before 3.21 is vulnerable to a path traversal vulnerability that allows creation of arbitrary files whe…
-
Unscored —CVE-2020-8636 Public exploit
An issue was discovered in OpServices OpMon 9.3.2 that allows Remote Code Execution .
-
Unscored —
an unauthenticated user could get access to information of some backend screens by invoking setSessionLocale in Apache …
-
Unscored —
In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in la…
-
Unscored —
An issue was discovered in OpServices OpMon 9.3.2. Starting from the apache user account, it is possible to perform pri…
-
Unscored —
A large or infinite loop vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and 1.13.2 allows attacker…
-
Unscored —
The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in iwp_mmb_set_request in i…
-
Unscored —
The Time Capsule plugin before 1.21.16 for WordPress has an authentication bypass. Any request containing IWP_JSON_PREF…
-
Unscored —
An issue was discovered in OpServices OpMon 9.3.2. Without authentication, it is possible to read server files (e.g., /…
-
Unscored —
An XML External Entity (XEE) vulnerability exists in the JOC Cockpit component of SOS JobScheduler 1.12 and 1.13.2 allo…
-
High 7.7
Path Traversal in Bosch Video Management System (BVMS)
A path traversal vulnerability in the Bosch Video Management System (BVMS) FileTransferService allows an authenticated remote attacker to read arbitrary files from the Central Server. This affects Bosch BVMS versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0…
-
Unscored —
Zoho ManageEngine Applications Manager 14 before 14520 allows a remote unauthenticated attacker to disclose OS file nam…
-
Critical 9.8
OS Command Injection in curling
All versions of curling.js are vulnerable to Command Injection via the run function. The command argument can be controlled by users without any sanitization.
-
Unscored —
RichFaces implementation in Nuxeo Platform 5.6.0 before HF27 and 5.8.0 before HF-01 does not restrict the classes for w…
-
Unscored —
On BIG-IP 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.0-11.6.5.1, the tmm…
-
Unscored —
When the Windows Logon Integration feature is configured for all versions of BIG-IP Edge Client for Windows, unauthoriz…
-
Unscored —
On BIG-IP 15.0.0-15.0.1.1 and 14.1.0-14.1.2.2, while processing specifically crafted traffic using the default 'xnet' d…
-
Unscored —
A Denial of service (DoS) vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege t…
-
Unscored —
The session.lua library in CGILua 5.0.x uses sequential session IDs, which makes it easier for remote attackers to pred…
-
Unscored —
The session.lua library in CGILua 5.1.x uses the same ID for each session, which allows remote attackers to hijack arbi…
-
Unscored —
The session.lua library in CGILua 5.2 alpha 1 and 5.2 alpha 2 uses weak session IDs generated based on OS time, which a…
-
Unscored —
A stack buffer overflow vulnerability in FortiClient for Linux 6.2.1 and below may allow a user with low privilege to c…
-
Unscored —
A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to r…
-
Unscored —
Buffer overflow in the DecodePSDPixels function in coders/psd.c in ImageMagick before 6.8.8-5 might allow remote attack…
-
Unscored —
Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick, possibly 6.8.8-5, allows remo…