Archive
March 2020
Vulnerabilities first published in this month (UTC), newest first.
85 results · Clear filters · Feed
-
High 7.8CVE-2020-1712 Public exploit
A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are…
-
High 8.8CVE-2020-11113 Public exploit
jackson-databind mishandles the interaction between serialization gadgets and typing
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).
-
Unscored —CVE-2020-5726 Public exploit
The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI server on port 8888. A re…
-
Unscored —
The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endp…
-
Unscored —CVE-2020-5723 Public exploit
The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database. This could allow an att…
-
Unscored —CVE-2020-10560 Public exploit
An issue was discovered in Open Source Social Network (OSSN) through 5.3. A user-controlled file path with a weak crypt…
-
Unscored —
Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function.
-
High 7.5CVE-2020-4276 Public exploit
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege escalation vulnerabili…
-
High 8.6CVE-2020-1764 Public exploit
Hard coded cryptographic key in Kiali
A hard-coded cryptographic key vulnerability in the default configuration file was found in Kiali, all versions prior to 1.15.1. A remote attacker could abuse this flaw by creating their own JWT signed tokens and bypass Kiali authentication mechanisms, possib…
-
High 7.2
FrozenNode Laravel-Administrator unrestricted file upload
FrozenNode Laravel-Administrator through 5.0.12 allows unrestricted file upload (and consequently Remote Code Execution) via admin/tips_image/image/file_upload image upload with PHP content within a GIF image that has the .php extension. NOTE: this product is…
-
Medium 5.3CVE-2020-10883 Public exploit
This vulnerability allows local attackers to escalate privileges on affected installations of TP-Link Archer A7 Firmwar…
-
High 8.1
This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer…
-
High 8.8
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Arc…
-
Unscored —CVE-2020-3766 Public exploit
Adobe Genuine Integrity Service versions Version 6.4 and earlier have an insecure file permissions vulnerability. Succe…
-
Unscored —
TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a denial of service via a…
-
Unscored —
rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the no…
-
Medium 6.3CVE-2020-8865 Public exploit
This vulnerability allows remote attackers to execute local PHP files on affected installations of Horde Groupware Webm…
-
Medium 4.3CVE-2020-8866 Public exploit
This vulnerability allows remote attackers to create arbitrary files on affected installations of Horde Groupware Webma…
-
Critical 9.8
The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via craft…
KEV Jan 28, 2022 -
High 8.3CVE-2020-6650 Public exploit
Arbitrary code execution through “Update Manager” Class
UPS companion software v1.05 & Prior is affected by ‘Eval Injection’ vulnerability. The software does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call e.g.”eval” in “Update Manager” class when software …
-
Unscored —
Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup Backup Listing Endpoint…
-
Critical 9.8
Deserialization of Untrusted Data in Liferay Portal
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS).
KEV Nov 3, 2021 -
Unscored —CVE-2020-10558 Public exploit
The driving interface of Tesla Model 3 vehicles in any release before 2020.4.10 allows Denial of Service to occur due t…
-
Unscored —
An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and prior allow…
-
Unscored —CVE-2019-16068 Public exploit
A CSRF vulnerability exists in NETSAS ENIGMA NMS version 65.0.0 and prior that could allow an attacker to be able to tr…
-
Unscored —CVE-2019-16065 Public exploit
A remote SQL injection web vulnerability was discovered in the Enigma NMS 65.0.0 and prior web application that allows …
-
Medium 4.0CVE-2020-5267 Public exploit
Possible XSS vulnerability in ActionView
In ActionView before versions 6.0.2.2 and 5.2.4.2, there is a possible XSS vulnerability in ActionView's JavaScript literal escape helpers. Views that use the `j` or `escape_javascript` methods may be susceptible to XSS attacks. The issue is fixed in versions…
-
High 8.8CVE-2020-10673 Public exploit
jackson-databind mishandles the interaction between serialization gadgets and typing
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).
-
Unscored —CVE-2020-10665 Public exploit
Docker Desktop allows local privilege escalation to NT AUTHORITY\SYSTEM because it mishandles the collection of diagnos…
-
High 7.8
VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for…
KEV Nov 3, 2021 -
Medium 5.4CVE-2020-10596 Public exploit
Cross-site Scripting in OpenCart
OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section.
-
Unscored —CVE-2019-20326 Public exploit
A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in extensions/cairo_io/cairo-image-surface-jpeg…
-
High 7.5
Unraid 6.8.0 allows authentication bypass.
KEV Nov 3, 2021 -
Critical 9.8
Unraid through 6.8.0 allows Remote Code Execution.
KEV Nov 3, 2021 -
Unscored —
index.php?sec=godmode/extensions&sec2=extensions/files_repo in Pandora FMS v7.0 NG allows authenticated administrators …
-
Unscored —CVE-2019-19945 Public exploit
uhttpd in OpenWrt through 18.06.5 and 19.x through 19.07.0-rc2 has an integer signedness error. This leads to out-of-bo…
-
Unscored —CVE-2020-10239 Public exploit
An issue was discovered in Joomla! before 3.9.16. Incorrect Access Control in the SQL fieldtype of com_fields allows ac…
-
Unscored —CVE-2020-10238 Public exploit
An issue was discovered in Joomla! before 3.9.16. Various actions in com_templates lack the required ACL checks, leadin…
-
Unscored —
CentOS-WebPanel.com (aka CWP) CentOS Web Panel (for CentOS 6 and 7) allows SQL Injection via the /cwp_{SESSION_HASH}/ad…
-
Critical 9.8
Code injection in codiad
Codiad Web IDE through 2.8.4 allows PHP Code injection.