Archive
1 April 2020
Vulnerabilities first published on this day (UTC), newest first.
108 results · Feed
-
Unscored —CVE-2020-1927 EPSS 57%
In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential …
-
Unscored —
In UniFi Video v3.10.1 (for Windows 7/8/10 x64) there is a Local Privileges Escalation to SYSTEM from arbitrary file de…
-
Unscored —
The UniFi Video Server (Windows) web interface configuration restore functionality at the “backup” and “wizard” endpoin…
-
Unscored —
The UniFi Video Server v3.9.3 and prior (for Windows 7/8/10 x64) web interface Firmware Update functionality, under cer…
-
Medium 6.3
Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during instal…
-
Low 2.3
Zoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement, which allows a local pr…
-
Medium 6.5CVE-2020-1958 Public exploit
Credentials bypass in Apache Druid
When LDAP authentication is enabled in Apache Druid 0.17.0, callers of Druid APIs with a valid set of LDAP credentials can bypass the credentialsValidator.userSearch filter barrier that determines if a valid LDAP user is allowed to authenticate with Druid. Th…
-
Medium —
Deserialization of Untrusted Data in Apache Dubbo
Unsafe deserialization occurs within a Dubbo application which has HTTP remoting enabled. An attacker may submit a POST request with a Java object in it to completely compromise a Provider instance of Apache Dubbo, if this instance enables HTTP. This issue af…
-
Medium 4.3
Incorrect Authorization in Apache Solr
In Apache Solr, the cluster can be partitioned into multiple collections and only a subset of nodes actually host any given collection. However, if a node receives a request for a collection it does not host, it proxies the request to a relevant node and serv…
-
Unscored —
LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection.
-
Unscored —
In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia (PAS) ES System v1.6.1, a restricted desktop environment e…
-
Unscored —
An issue was discovered in Deskpro before 2019.8.0. The /api/email_accounts endpoint failed to properly validate a user…
-
Medium 6.5
An issue was discovered in Deskpro before 2019.8.0. The /api/people endpoint failed to properly validate a user's privi…
-
High 8.8
An issue was discovered in Deskpro before 2019.8.0. The /api/apps/* endpoints failed to properly validate a user's priv…
-
High 7.6
An issue was discovered in Deskpro before 2019.8.0. The /api/tickets endpoint failed to properly validate a user's priv…
-
Critical 9.1
An issue was discovered in Deskpro before 2019.8.0. This product enables administrators to modify the helpdesk interfac…
-
Medium 6.5
Kubernetes API Server denial of service vulnerability from malicious YAML payloads
The Kubernetes API Server component in versions 1.1-1.14, and versions prior to 1.15.10, 1.16.7 and 1.17.3 allows an authorized user who sends malicious YAML payloads to cause the kube-apiserver to consume excessive CPU cycles while parsing YAML.
-
Unscored —
The connection initiation process in March Networks Command Client before 2.7.2 allows remote attackers to execute arbi…
-
Medium 6.5
Cross Site Scripting (XSS) flaws found in Tiki-Wiki CMS software
There is an Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in php webpages of Tiki-Wiki Groupware. Tiki-Wiki CMS all versions through 20.0 allows malicious users to cause the injection of malicious code fragments (…
-
Unscored —
Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) 2.0.2 is vulnerable to Remote Command Execution …
-
Medium 5.3
Apache CXF JMX Integration is vulnerable to a MITM attack
Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus. If the ‘createMBServerConnectorFactory‘ property of the default InstrumentationManagerImpl is not disabled, then it is vulnerable to a man-in…
-
Medium 6.5
session fixation in rCTF
In RedpwnCTF before version 2.3, there is a session fixation vulnerability in exploitable through the `#token=$ssid` hash when making a request to the `/verify` endpoint. An attacker team could potentially steal flags by, for example, exploiting a stored XSS …
-
Unscored —CVE-2020-1934 EPSS 52%
In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP serv…
-
High 8.8
Nexus Repository Manager 3 - Remote Code Execution
Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).
KEV Nov 3, 2021 -
Unscored —
Scripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when generating navigational ele…
-
High 8.8
Remote Code Execution - JavaEL Injection (low privileged accounts) in Nexus Repository Manager
Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution.
-
Unscored —
Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07.
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A re…
-
Unscored —
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. …
-
Unscored —
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. …
-
Unscored —
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. …
-
Medium 4.8
Persistent Cross-Site scripting in Nexus Repository Manager
Sonatype Nexus Repository before 3.21.2 allows XSS.
-
Unscored —
Multiple memory corruption issues were addressed with improved state management. This issue is fixed in iOS 13.4 and iP…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.4 and iPadOS 13.4, …
-
Unscored —
The issue was resolved by clearing application previews when content is deleted. This issue is fixed in iOS 13.4 and iP…
-
Unscored —
A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1. A malicious iframe may use …
-
Unscored —
The issue was addressed by clearing website permission prompts after navigation. This issue is fixed in iOS 13.4 and iP…
-
Unscored —
The issue was addressed with improved handling of icon caches. This issue is fixed in iOS 14.0 and iPadOS 14.0. A malic…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4. An attacke…
-
Unscored —
An issue existed in the selection of video file by Mail. The issue was fixed by selecting the latest version of a video…