Archive
21 April 2020
Vulnerabilities first published on this day (UTC), newest first.
65 results · Feed
-
Unscored —
The CentralAuth extension through REL1_34 for MediaWiki allows remote attackers to obtain sensitive hidden account info…
-
Medium 6.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befo…
-
Medium 6.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befo…
-
Medium 6.8
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34,…
-
Medium 6.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befo…
-
Medium 6.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects DM200 befo…
-
Medium 6.5
NETGEAR GS810EMX devices before 1.0.0.5 are affected by disclosure of sensitive information.
-
Medium 4.5
Certain NETGEAR devices are affected by denial of service. This affects R6100 before 1.0.1.22, R7500 before 1.0.0.122, …
-
High 8.8
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.7…
-
Low 3.0
Information disclosure of source code in SimpleSAMLphp
SimpleSAMLphp versions before 1.18.6 contain an information disclosure vulnerability. The module controller in `SimpleSAML\Module` that processes requests for pages hosted by modules, has code to identify paths ending with `.php` and process those as PHP code…
-
Unscored —
SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack. Addition…
-
Unscored —CVE-2019-17525 Public exploit
The login page on D-Link DIR-615 T1 20.10 devices allows remote attackers to bypass the CAPTCHA protection mechanism an…
-
Medium 6.2
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R6700 before 1.0.1.26, R7000 …
-
High 8.8
Certain NETGEAR devices are affected by CSRF. This affects R6050/JR6150 before 1.0.1.7, PR2000 before 1.0.0.17, R6220 b…
-
High 8.4
NETGEAR D6100 devices before 1.0.0.50_0.0.50 are affected by command injection.
-
Medium 6.7
NETGEAR R7800 devices before 1.0.2.36 are affected by command injection.
-
High 8.4
Certain NETGEAR devices are affected by command injection. This affects R6300v2 before 1.0.4.8_10.0.77, R6400 before 1.…
-
Medium 4.0
Malicious URLs can still cause Git to send a stored credential to the wrong server
Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. This bug is similar to CVE-2020-5260(GHSA-qm7j-c969-7j4q). The fix for that bug still left the door open for an expl…
-
Medium 6.7
Certain NETGEAR devices are affected by command injection. This affects D6220 before 1.0.0.28 and D6100 before 1.0.0.50…
-
Medium 6.7
Certain NETGEAR devices are affected by command injection. This affects R6400 before 1.0.1.24, R6700 before 1.0.1.26, R…
-
Medium 6.2
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects R6400 before 1.0.1.…
-
High 8.4
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6700v2 before 1.1.0…
-
High 7.5
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6200v2 before 1.0.3…
-
Medium 6.1
Certain NETGEAR devices are affected by reflected XSS. This affects R6700v2 before 1.1.0.42 and R6800 before 1.1.0.42.
-
Medium 6.7
Certain NETGEAR devices are affected by command injection. This affects R6220 before 1.1.0.50, R6700v2 before 1.1.0.38,…
-
Unscored —
"HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to a…
-
Medium 6.7
Certain NETGEAR devices are affected by command injection. This affects R6100 before 1.0.1.14, R7500 before 1.0.0.110, …
-
Medium 6.2
NETGEAR R7800 devices before 1.0.2.30 are affected by incorrect configuration of security settings.
-
High 7.8
DLL Hijacking in Google Earth Pro Windows installer
Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system.
-
Medium 6.7
Certain NETGEAR devices are affected by command injection. This affects R7800 before 1.0.2.16 and R9000 before 1.0.2.4.
-
Medium 6.7
Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC120 before 2.1.4, WN…
-
Unscored —
An elevation of privilege in Vesta Control Panel through 0.9.8-26 allows an attacker to gain root system access from th…
-
Unscored —
A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary c…
-
Unscored —
An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of com_users allow t…
-
Unscored —
An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of com_users allow t…
-
Unscored —CVE-2020-11890 Public exploit
An issue was discovered in Joomla! before 3.9.17. Improper input validations in the usergroup table class could lead to…
-
Medium 6.7
Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC120 before 2.1.4, WN…
-
Medium 5.2
NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.
-
Medium 4.2
NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by incorrect configuration of se…
-
Medium 5.2
NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.