Archive
12 March 2020
Vulnerabilities first published on this day (UTC), newest first.
299 results · Feed
-
Unscored —
Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker t…
-
Unscored —
Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potential…
-
Unscored —
GitLab 12.8.x before 12.8.6, when sign-up is enabled, allows remote attackers to bypass email domain restrictions withi…
-
Medium 5.3
Improperly Controlled Modification of Dynamically-Determined Object Attributes in querymen
querymen prior to 2.1.4 allows modification of object properties. The parameters of exported function handler(type, name, fn) can be controlled by users without any sanitization. This could be abused for Prototype Pollution attacks.
-
Unscored —
In the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related to IP range evaluation…
-
Unscored —
A Cross-Site Request Forgery (CSRF) vulnerability in the user interface of Fortinet FortiSIEM 5.2.5 could allow a remot…
-
Unscored —
Huawei USG6000V with versions V500R001C20SPC300, V500R003C00SPC100, and V500R005C00SPC100 have an out-of-bounds read vu…
-
Unscored —
Huawei smartphone Honor V30 with versions earlier than OxfordS-AN00A 10.0.1.167(C00E166R4P1) have an improper authentic…
-
Unscored —
Opera through 53 on Android allows Address Bar Spoofing. Characters from several languages are displayed in Right-to-Le…
-
Unscored —CVE-2019-17658 Public exploit
An unquoted service path vulnerability in the FortiClient FortiTray component of FortiClientWindows v6.2.2 and prior al…
-
Unscored —
An improper neutralization of input vulnerability in the URL Description in Fortinet FortiIsolator version 1.2.2 allows…
-
Unscored —
An Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in Fortinet FortiWeb 6.0.5, 6…
-
Unscored —
Improper access control in the subsystem for Intel(R) Smart Sound Technology may allow an authenticated user to potenti…
-
Unscored —CVE-2020-0551 Public exploit
Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to pot…
-
Unscored —
Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially…
-
Unscored —
An issue was discovered in Poly (formerly Polycom) HDX 3.1.13. A feature exists that allows the creation of a server / …
-
Unscored —
Improper buffer restrictions in firmware for Intel(R) NUC may allow an authenticated user to potentially enable escalat…
-
Critical 9.8
Vulnerability in Torpedo Query
Torpedo Query before 2.5.3 mishandles the LIKE operator in ConditionBuilder.java, LikeCondition.java, and NotLikeCondition.java.
-
Unscored —
Improper configuration in block design for Intel(R) MAX(R) 10 FPGA all versions may allow an authenticated user to pote…
-
Unscored —
Improper input validation in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to…
-
Unscored —
Uncontrolled search path in Intel(R) Graphics Drivers before version 26.20.100.7158 may allow an authenticated user to …
-
Unscored —
Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially ena…
-
Unscored —
Unquoted service path in Intel(R) Optane(TM) DC Persistent Memory Module Management Software before version 1.0.0.3461 …
-
Unscored —
bitcoind and Bitcoin-Qt prior to 0.10.2 allow attackers to cause a denial of service (disabled functionality such as a …
-
Unscored —
bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call.
-
Unscored —
messagepartthemes/default/defaultrenderer.cpp in messagelib in KDE Applications before 18.12.0 does not properly restri…
-
Medium 6.1
Cross-site Scripting in yii2cmf
yidashi yii2cmf 2.0 has XSS via the /search q parameter.
-
Unscored —
bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server…
-
Unscored —
Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of …
-
Unscored —
Path traversal in igdkmd64.sys for Intel(R) Graphics Drivers before versions 15.45.30.5103, 15.40.44.5107, 15.36.38.511…
-
Unscored —
NVIDIA vGPU graphics driver for guest OS contains a vulnerability in which an incorrect resource clean up on a failure …
-
Unscored —
NVIDIA Virtual GPU Manager contains a vulnerability in the kernel module (nvidia.ko), where a null pointer dereference …
-
Unscored —
NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in the vGPU plugin in which an input index value is …
-
Unscored —
Improper access control for Intel(R) Graphics Drivers before versions 15.33.49.5100 and 15.36.38.5117 may allow an auth…
-
Unscored —
Out-of-bounds write in Intel(R) Graphics Drivers before version 15.36.38.5117 may allow an authenticated user to potent…
-
Unscored —
Improper access control in Intel(R) Graphics Drivers before version 26.20.100.7463 may allow an authenticated user to p…
-
Unscored —
Uncontrolled search path element in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7584, 15.45.3…
-
Unscored —
Improper default permissions in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7463 and 15.45.30…
-
Unscored —
Uncaught exception in system driver for Intel(R) Graphics Drivers before version 15.40.44.5107 may allow an authenticat…
-
Unscored —
Incorrect default permissions in the installer for Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.51…