Archive
23 April 2020
Vulnerabilities first published on this day (UTC), newest first.
34 results · Clear filters · Feed
-
High 7.1CVE-2019-15794 Public exploit
Reference counting error in overlayfs/shiftfs error path when used in conjuction with aufs
Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, both replace vma->vm_file in their mmap handlers. On error the original value is not restored, and the reference is put for t…
-
High 7.1CVE-2019-15792 Public exploit
Type confusion in shiftfs
In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() calls fdget(oldfd), then without further checks passes the resulting file* into shiftfs_real_fdget(), which casts file->pri…
-
High 7.1CVE-2019-15791 Public exploit
Reference count underflow in shiftfs
In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() installs an fd referencing a file from the lower filesystem without taking an additional reference to that file. After the …
-
High 8.0
NETGEAR ReadyNAS devices before 6.9.3 are affected by CSRF.
-
High 8.6
Incorrect Default Permissions in Binance tss-lib
The keygen protocol implementation in Binance tss-lib before 1.2.0 allows attackers to generate crafted h1 and h2 parameters in order to compromise a signing round or obtain sensitive information from other parties.
-
High 8.8
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6400 before 1.0…
-
High 8.8
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.3…
-
High 7.1
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D1500 before 1.0.0.27, D500 b…
-
High 8.8
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.7…
-
High 8.8
Certain NETGEAR devices are affected by a hardcoded password. This affects D3600 before 1.0.0.76 and D6000 before 1.0.0…
-
High 8.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC5…
-
High 8.8
Certain NETGEAR devices are affected by authentication bypass. This affects WAC505 before 5.0.0.17 and WAC510 before 5.…
-
High 8.1
Certain NETGEAR devices are affected by unauthenticated firmware downgrade. This affects WAC505 before 5.0.0.17 and WAC…
-
High 8.8
NETGEAR ReadyNAS devices before 6.9.3 are affected by CSRF.
-
High 8.0
NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.
-
High 8.8
Certain NETGEAR devices are affected by authentication bypass. This affects R6300v2 before 1.0.4.8, PLW1000v2 before 1.…
-
High 8.8
Certain NETGEAR devices are affected by authentication bypass. This affects D6220 before 1.0.0.28, D6400 before 1.0.0.6…
-
High 8.8
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JNR1010v2 before…
-
High 8.8
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JR6150 before 1.…
-
High 8.8
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JR6150 before 1.…
-
High 8.8
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JNR1010v2 before…
-
High 8.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects EX61…
-
High 8.8
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6220 before V1.…
-
High 7.4
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6250 before 1.0.4.8…
-
High 8.8
Certain NETGEAR devices are affected by CSRF. This affects JR6150 before 1.0.1.10, R6050 before 1.0.1.10, R6250 before …
-
High 8.8
Certain NETGEAR devices are affected by authentication bypass. This affects R6300v2 before 1.0.4.8, R6400 before 1.0.1.…
-
High 8.8
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6250 before 1.0…
-
High 8.8
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects EX3700 before 1.0.0.…
-
High 8.8
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects EX6200v2 before 1.0.…
-
High 8.8
Certain NETGEAR devices are affected by CSRF. This affects JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10, JWNR2010v…
-
High 8.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D620…
-
High 8.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D780…
-
High 7.4
IBM Tivoli Monitoring 6.3.0 could allow a local attacker to execute arbitrary code on the system. By placing a speciall…
-
High 8.8
The users-customers-import-export-for-wp-woocommerce plugin before 1.3.9 for WordPress allows subscribers to import adm…