Archive
February 2020
Vulnerabilities first published in this month (UTC), newest first.
1,406 results · Feed
-
Unscored —
danfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options are mishandled.
-
Unscored —
An issue was discovered in SmartClient 12.0. The Remote Procedure Call (RPC) saveFile provided by the console functiona…
-
Unscored —
Graph Builder in SAS Visual Analytics 8.5 allows XSS via a graph template that is accessed directly.
-
Unscored —
An issue was discovered in SmartClient 12.0. The Remote Procedure Call (RPC) loadFile provided by the console functiona…
-
Unscored —
An issue was discovered in SmartClient 12.0. Unauthenticated exploitation of blind XXE can occur in the downloadWSDL fe…
-
Unscored —
An issue was discovered in SmartClient 12.0. If an unauthenticated attacker makes a POST request to /tools/developerCon…
-
Unscored —
The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a…
-
Unscored —
CandidATS 2.1.0 is vulnerable to CSRF that allows for an administrator account to be added via the index.php?m=settings…
-
Unscored —
fauzantrif eLection 2.0 has SQL Injection via the admin/ajax/op_kandidat.php id parameter.
-
Unscored —
fauzantrif eLection 2.0 has XSS via the Admin Dashboard -> Settings -> Election -> "message if election is closed" fiel…
-
Unscored —
SOPlanning 1.45 allows XSS via the "Your SoPlanning url" field.
-
Unscored —
SOPlanning 1.45 allows XSS via the Name or Comment to status.php.
-
Unscored —CVE-2020-9039 Scanner template
Couchbase Server 4.0.0, 4.1.0, 4.1.1, 4.5.0, 4.5.1, 4.6.0 through 4.6.5, 5.0.0, 5.1.1, 5.5.0 and 5.5.1 have Insecure Pe…
-
High 8.8CVE-2020-8862 EPSS 13%
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2…
-
High 8.8
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1…
-
High 7.1
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S10 Fi…
-
Unscored —
graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in …
-
Unscored —
Certain Xerox WorkCentre printers before 073.xxx.000.02300 do not require the user to reenter or validate LDAP bind cre…
-
Unscored —
Gogs through 0.11.91 allows attackers to violate the admin-specified repo-creation policy due to an internal/db/repo.go…
-
Unscored —
In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault…
-
Unscored —
OX App Suite through 7.10.2 allows SSRF.
-
Unscored —
In the JetBrains Scala plugin before 2019.2.1, some artefact dependencies were resolved over unencrypted connections.
-
Unscored —
The init script in the Debian x11-common package before 1:7.6+12 is vulnerable to a symlink attack that can lead to a p…
-
Unscored —
Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar.
-
Unscored —
Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could allow remote…
-
Unscored —
The HTTPS protocol, as used in unspecified web applications, can encrypt compressed data without properly obfuscating t…
-
Unscored —
Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Micro…
-
Unscored —
D-Link DCH-M225 1.05b01 and earlier devices allow remote authenticated admins to execute arbitrary OS commands via shel…
-
Unscored —
Kernel/Modules/AgentTicketWatcher.pm in Open Ticket Request System (OTRS) 3.0.x before 3.0.21, 3.1.x before 3.1.17, and…
-
Unscored —
Insecure plugin update mechanism in tucan through 0.3.10 could allow remote attackers to perform man-in-the-middle atta…
-
Unscored —
Kernel/Modules/AgentTicketPhone.pm in Open Ticket Request System (OTRS) 3.0.x before 3.0.20, 3.1.x before 3.1.16, and 3…
-
Unscored —
D-Link DCH-M225 1.05b01 and earlier devices allow remote attackers to execute arbitrary OS commands via shell metachara…
-
Unscored —
Atos Unify OpenScape UC Application V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows XSS. An attac…
-
Unscored —
Atos Unify OpenScape UC Web Client V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows remote attacke…
-
Medium 6.1
Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot I…
-
High 7.1
Dell Client Consumer and Commercial Platforms contain an Arbitrary File Overwrite Vulnerability. The vulnerability is l…
-
Unscored —
A buffer overflow was found in Patriot Viper RGB through 1.1 when processing IoControlCode 0x80102040. Local attackers …
-
Unscored —
Aterm WG2600HS firmware Ver1.3.2 and earlier allows an authenticated attacker on the same network segment to execute ar…
-
Unscored —
Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.3.2 and earlier allows remote attackers to inject ar…
-
Unscored —
Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS…