Archive
5 March 2020
Vulnerabilities first published on this day (UTC), newest first.
89 results · Feed
-
Unscored —
The verify endpoint in YubiKey Validation Server before 2.40 does not check the length of SQL queries, which allows rem…
-
Unscored —
The sync endpoint in YubiKey Validation Server before 2.40 allows remote attackers to replay an OTP. NOTE: this issue i…
-
High 7.5
In all versions of Omron PLC CJ Series, an attacker can send a series of specific data packets within a short period, c…
-
Unscored —
In Emerson ValveLink v12.0.264 to v13.4.118, a vulnerability in the ValveLink software may allow a local, unprivileged,…
-
Unscored —
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in whic…
-
Unscored —
An issue was discovered in Centreon before 18.10.8, 19.04.5, and 19.10.2. It provides sensitive information via an unau…
-
Unscored —
An issue was discovered in Centreon before 2.8.30, 18.10.8, 19.04.5, and 19.10.2. SQL Injection exists via the include/…
-
Unscored —
An issue was discovered in EFS Easy Chat Server 3.1. There is a buffer overflow via a long body2.ghp message parameter.
-
Medium 6.5
Directory Traversal with spring-cloud-config-server
Spring Cloud Config, versions 2.2.x prior to 2.2.2, versions 2.1.x prior to 2.1.7, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send …
-
Unscored —
The HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper validation of user-suppli…
-
Unscored —
The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. This affects v…
-
Unscored —
HCL Connections 6.5 is vulnerable to possible information leakage. Connections could disclose sensitive information via…
-
Unscored —
QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz …
-
High 7.6CVE-2020-5250 Public exploit
Possible information disclosure in PrestaShop
In PrestaShop before version 1.7.6.4, when a customer edits their address, they can freely change the id_address in the form, and thus steal someone else's address. It is the same with CustomerForm, you are able to change the id_customer and change all inform…
-
Unscored —
An issue was discovered in Centreon before 18.10.8, 19.10.1, and 19.04.2. It allows CSRF with resultant remote command …
-
Unscored —
An issue was discovered in Centreon before 2.8.31, 18.10.9, 19.04.6, and 19.10.3. It provides sensitive information via…
-
Unscored —
An issue was discovered on XIAOMI AI speaker MDZ-25-DT 1.34.36, and 1.40.14. Attackers can get root shell by accessing …
-
Unscored —
init_tmp in TeeJee.FileSystem.vala in Timeshift before 20.03 unsafely reuses a preexisting temporary directory in the p…
-
Unscored —
An untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and earlier allows an attac…
-
High 7.4
IBM Platform LSF 9.1 and 10.1, IBM Spectrum LSF Suite 10.2, and IBM Spectrum Suite for HPA 10.2 could allow a local use…
-
Unscored —
An issue was discovered on D-Link DSL-2640B E1 EU_1.01 devices. The administrative interface doesn't perform authentica…
-
High 8.8CVE-2020-9402 EPSS 24%
SQL injection in Django
Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a tolerance parameter in GIS functions and aggregates on Oracle. By passing a suitably crafted tolerance to GIS functions and aggregates on O…
-
Unscored —
D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Confi…
-
High 7.8
D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configur…
KEV Jun 29, 2023 -
Unscored —
Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilit…
-
Unscored —
D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmw…
-
Unscored —
Multiple SQL injection vulnerabilities in TestLink through 1.9.19 allows remote authenticated users to execute arbitrar…
-
Unscored —CVE-2020-9380 Public exploit
IPTV Smarters WEB TV PLAYER through 2020-02-22 allows attackers to execute OS commands by uploading a script.
-
Unscored —
PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, as demonstrated by the ExpenseItem or ExpenseC…
-
Unscored —
PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by the email parameter in i…
-
Unscored —
HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking.
-
Unscored —
The secret key used to make the Initial Sequence Number in the TCP SYN packet could be brute forced and therefore can b…
-
Unscored —
Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying into it in…
-
Unscored —
Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying it in Snap…
-
Unscored —
Possible buffer overflow in data offload handler due to lack of check of keydata length when copying data in Snapdragon…
-
Unscored —
Possible buffer overflow in WLAN Parser due to lack of length check when copying data in Snapdragon Auto, Snapdragon Co…
-
Unscored —
Buffer overflow occurs while processing LMP packet in which name length parameter exceeds value specified in BT-specifi…
-
Unscored —
Possible integer overflow while checking the length of frame which is a 32 bit integer and is added to another 32 bit i…
-
Unscored —
While parsing Service Descriptor Extended Attribute received as part of SDF frame, there is a possibility that incorrec…
-
Unscored —
Possible Integer underflow in WLAN function due to lack of check of data received from user side in Snapdragon Auto, Sn…