22 April 2020

127 results · Feed

• Medium 6.1
  CVE-2020-7350 Public exploit

  Metasploit Framework Plugin Libnotify Command Injection

  Rapid7 Metasploit Framework versions before 5.0.85 suffers from an instance of CWE-78: OS Command Injection, wherein the libnotify plugin accepts untrusted user-supplied data via a remote computer's hostname or service name. An attacker can create a specially…

  Rapid7 Metasploit Framework
  Apr 22, 2020
• Medium 6.5
  CVE-2020-8831

  World writable root owned lock file created in user controllable location

  Apport creates a world writable lock file with root ownership in the world writable /var/lock/apport directory. If the apport/ directory does not exist (this is not uncommon as /var/lock is a tmpfs), it will create the directory, otherwise it will simply cont…

  Canonical Apport apport Ubuntu
  Apr 22, 2020
• Medium 5.6
  CVE-2020-8833

  Apport race condition in crash report permissions

  Time-of-check Time-of-use Race Condition vulnerability on crash report ownership change in Apport allows for a possible privilege escalation opportunity. If fs.protected_symlinks is disabled, this can be exploited between the os.open and os.chown calls when t…

  Canonical Apport apport Ubuntu
  Apr 22, 2020
• Medium 5.3
  CVE-2020-8867

  Insufficient Session Expiration and TOCTOU Race Condition in OPC FOundation UA .Net Standard

  This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Standard 1.04.358.30. Authentication is not required to exploit this vulnerability. The specific flaw exists within the hand…

  OPC Foundation UA .NET Standard OPCFoundation.NetStandard.Opc.Ua NuGet
  Apr 22, 2020
• Critical 9.8
  CVE-2020-10915 Public exploit EPSS 88%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4…

  Veeam One Agent
  Apr 22, 2020
• Critical 9.8
  CVE-2020-10914 Public exploit EPSS 48%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4…

  Veeam One Agent
  Apr 22, 2020
• High 7.8
  CVE-2020-10913

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.…

  Foxit PhantomPDF
  Apr 22, 2020
• High 7.8
  CVE-2020-10911

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.…

  Foxit PhantomPDF
  Apr 22, 2020
• High 7.8
  CVE-2020-10912

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.…

  Foxit PhantomPDF
  Apr 22, 2020
• High 7.8
  CVE-2020-10909

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.…

  Foxit PhantomPDF
  Apr 22, 2020
• High 7.8
  CVE-2020-10908

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.…

  Foxit PhantomPDF
  Apr 22, 2020
• High 7.8
  CVE-2020-10910

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.…

  Foxit PhantomPDF
  Apr 22, 2020
• High 7.8
  CVE-2020-10906

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29…

  Foxit Reader
  Apr 22, 2020
• High 7.8
  CVE-2020-10907

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29…

  Foxit Reader
  Apr 22, 2020
• Low 3.3
  CVE-2020-10905

  This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Phantom…

  Foxit PhantomPDF
  Apr 22, 2020
• High 7.8
  CVE-2020-10904

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.…

  Foxit PhantomPDF
  Apr 22, 2020
• High 7.8
  CVE-2020-10902

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.…

  Foxit PhantomPDF
  Apr 22, 2020
• Low 3.3
  CVE-2020-10903

  This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Phantom…

  Foxit PhantomPDF
  Apr 22, 2020
• High 7.8
  CVE-2020-10900

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29…

  Foxit Reader
  Apr 22, 2020
• Low 3.3
  CVE-2020-10901

  This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Phantom…

  Foxit PhantomPDF
  Apr 22, 2020
• High 7.8
  CVE-2020-10899

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29…

  Foxit Reader
  Apr 22, 2020
• High 7.8
  CVE-2020-10898

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.…

  Foxit PhantomPDF
  Apr 22, 2020
• High 7.8
  CVE-2020-10897

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.…

  Foxit PhantomPDF
  Apr 22, 2020
• High 7.8
  CVE-2020-10896

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.…

  Foxit PhantomPDF
  Apr 22, 2020
• High 7.8
  CVE-2020-10895

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.…

  Foxit PhantomPDF
  Apr 22, 2020
• High 7.8
  CVE-2020-10893

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.…

  Foxit PhantomPDF
  Apr 22, 2020
• Low 3.3
  CVE-2020-10894

  This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Phantom…

  Foxit PhantomPDF
  Apr 22, 2020
• High 7.8
  CVE-2020-10891

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.…

  Foxit PhantomPDF
  Apr 22, 2020
• High 7.8
  CVE-2020-10892

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.…

  Foxit PhantomPDF
  Apr 22, 2020
• High 7.8
  CVE-2020-10889

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.…

  Foxit PhantomPDF
  Apr 22, 2020
• High 7.8
  CVE-2020-10890

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.…

  Foxit PhantomPDF
  Apr 22, 2020
• Medium 6.8
  CVE-2018-21151

  Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D7800 before 1.0.1.34,…

  Apr 22, 2020
• Medium 6.8
  CVE-2018-21150

  Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befo…

  Apr 22, 2020
• Unscored —
  CVE-2020-11649

  An issue was discovered in GitLab CE and EE 8.15 through 12.9.2. Members of a group could still have access after the g…

  Apr 22, 2020
• Unscored —
  CVE-2020-11506

  An issue was discovered in GitLab 10.7.0 and later through 12.9.2. A Workhorse bypass could lead to job artifact upload…

  Apr 22, 2020
• Unscored —
  CVE-2020-11505

  An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7.9, 12.8.x before 12.8.…

  Apr 22, 2020
• High 7.5
  CVE-2020-1983

  libslirp: use after free vulnerability cause a denial of service.

  A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.

  slirp libslirp qemu qemu Debian Ubuntu Alpine
  Apr 22, 2020
• High 7.5
  CVE-2020-7488

  A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information …

  Apr 22, 2020
• Unscored —
  CVE-2020-7487

  A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execut…

  Apr 22, 2020
• Unscored —
  CVE-2020-7490

  A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo Desi…

  Apr 22, 2020