Archive
25 March 2020
Vulnerabilities first published on this day (UTC), newest first.
110 results · Feed
-
Medium 5.9
This vulnerability allows remote attackers to bypass authentication on affected installations of TP-Link Archer A7 Firm…
-
High 8.1
This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 …
-
High 8.1
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Fir…
-
High 8.1
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Fir…
-
Medium 5.3CVE-2020-10883 Public exploit
This vulnerability allows local attackers to escalate privileges on affected installations of TP-Link Archer A7 Firmwar…
-
High 8.1
This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer…
-
Critical 9.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Fir…
-
High 8.8
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Arc…
-
Unscored —
Creative Cloud Desktop Application versions 5.0 and earlier have a time-of-check to time-of-use (toctou) race condition…
-
Unscored —
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation c…
-
Unscored —
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a remote file read vulnerability. Successful exploitation…
-
Unscored —
Adobe Bridge versions 10.0 have a heap-based buffer overflow vulnerability. Successful exploitation could lead to arbit…
-
Unscored —
Adobe Bridge versions 10.0 have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary c…
-
Unscored —
Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf) vulnerability. Successful e…
-
Medium 4.1
Reflected XSS with url_name parameter of PrestaShop module ps_facetedsearch
PrestaShop module ps_facetedsearch versions before 3.5.0 has a reflected XSS with `url_name` parameter. The problem is fixed in 3.5.0
-
High 7.2
arbitrary shell execution in Nick Chan Bot
In Nick Chan Bot before version 1.0.0-beta there is a vulnerability in the `npm` command which is part of this software package. This allows arbitrary shell execution,which can compromise the bot This is patched in version 1.0.0-beta
-
Unscored —
SVG Image module allows to upload SVG files. The module did not sufficiently protect against malicious code inside SVG …
-
Medium 6.2
LDAP connector injection in Perun
In Perun before version 3.9.1, VO or group manager can modify configuration of the LDAP extSource to retrieve all from Perun LDAP. Issue is fixed in version 3.9.1 by sanitisation of the input.
-
High 7.6
Local file inclusion vulnerability in http4s
http4s before versions 0.18.26, 0.20.20, and 0.21.2 has a local file inclusion vulnerability. This vulnerability applies to all users of org.http4s.server.staticcontent.FileService, org.http4s.server.staticcontent.ResourceService and org.http4s.server.staticc…
-
Unscored —CVE-2020-3766 Public exploit
Adobe Genuine Integrity Service versions Version 6.4 and earlier have an insecure file permissions vulnerability. Succe…
-
Unscored —
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2…
-
Unscored —
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2…
-
Unscored —
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2…
-
Unscored —
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2…
-
Unscored —
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2…
-
Unscored —
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2…
-
Unscored —
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2…
-
Unscored —
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2…
-
Unscored —
Harris Ormed Self Service before 2019.1.4 allows an authenticated user to view W-2 forms belonging to other users via a…
-
Unscored —
An issue was discovered in gdrv.sys in Gigabyte APP Center before 19.0227.1. The vulnerable driver exposes a wrmsr inst…
-
Unscored —
An issue was discovered in kerneld.sys in AIDA64 before 5.99. The vulnerable driver exposes a wrmsr instruction via IOC…
-
Unscored —
An issue was discovered in WinRing0x64.sys in Moo0 System Monitor 1.83. The vulnerable driver exposes a wrmsr instructi…
-
Unscored —
GNU patch through 2.7.6 contains a free(p_line[p_end]) Double Free vulnerability in the function another_hunk in pch.c …
-
Unscored —
An issue was discovered in GPU-Z.sys in TechPowerUp GPU-Z before 2.23.0. The vulnerable driver exposes a wrmsr instruct…
-
Unscored —
DevActSvc.exe in ASUS Device Activation before 1.0.7.0 for Windows 10 notebooks and PCs could lead to unsigned code exe…
-
High 7.6
XXE vulnerability in Jenkins RapidDeploy Plugin
Jenkins RapidDeploy Plugin 4.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
-
Medium 5.4
Stored XSS vulnerability in Jenkins RapidDeploy Plugin
Jenkins RapidDeploy Plugin 4.2 and earlier does not escape package names in the table of packages obtained from a remote server, resulting in a stored XSS vulnerability.
-
Medium 6.1
Reflected XSS vulnerability in Jenkins Queue cleanup Plugin
A form validation endpoint in Jenkins Queue cleanup Plugin 1.3 and earlier does not properly escape a query parameter displayed in an error message, resulting in a reflected XSS vulnerability.
-
High 8.8
RCE vulnerability in Jenkins OpenShift Pipeline Plugin
Jenkins OpenShift Pipeline Plugin 1.0.56 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.
-
High 8.8
RCE vulnerability in Jenkins Azure Container Service Plugin
Jenkins Azure Container Service Plugin 1.0.1 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.