Archive
23 April 2020
Vulnerabilities first published on this day (UTC), newest first.
27 results · Clear filters · Feed
-
Medium 6.5CVE-2019-15793 Public exploit
Mishandling of file-system uid/gid with namespaces in shiftfs
In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, several locations which shift ids translate user/group ids before performing operations in the lower filesystem were translating them into init_user_ns, whe…
-
Medium 4.5
Certain NETGEAR devices are affected by denial of service. This affects R6100 before 1.0.1.22, R7500 before 1.0.0.122, …
-
Medium 4.5
Certain NETGEAR devices are affected by denial of service. This affects R6100 before 1.0.1.22, R7500 before 1.0.0.122, …
-
Medium 6.8
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6220 before 1.1.0.64 …
-
Medium 6.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects DGN2200Bv4…
-
Medium 4.5
Certain NETGEAR devices are affected by denial of service. This affects R6100 before 1.0.1.22, R7500 before 1.0.0.122, …
-
Medium 4.6
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D3600 before 1.0.0.76 and D60…
-
Medium 6.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6700 befo…
-
Medium 6.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects R670…
-
Medium 6.8
NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.
-
Medium 6.8
NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.
-
Medium 6.8
NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.
-
Medium 6.8
NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.
-
Medium 6.8
NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.
-
Medium 6.8
NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.
-
Medium 5.7
Command execution due to unsanitized input in Netatmo Smart Indoor Security Camera
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in firmware versions prior to x.xx of Netatmo Smart Indoor Camera allows an attacker to execute commands on the device. This issue affects: Netatmo Smart Indoor …
-
Medium 6.8
NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.
-
Medium 6.8
NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.
-
Medium 6.3
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.6…
-
Medium 5.2
Certain NETGEAR devices are affected by stored XSS. This affects R6400 before 1.0.1.14, R6700 before 1.0.1.22, R6900 be…
-
Medium 6.1
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects EX3700 before 1.0.0.…
-
Medium 4.2
Prototype pollution in paypal-adaptive
paypal-adaptive through 0.4.2 manipulation of JavaScript objects resulting in Prototype Pollution. The PayPal function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.
-
Medium 4.6
IBM MaaS360 6.82 could allow a user with pysical access to the device to crash the application which may enable the use…
-
Medium 5.0
IBM UrbanCode Deploy (UCD) 7.0.3.0 and 7.0.4.0 could allow an authenticated user to impersonate another user if the ser…
-
Medium 6.2
IBM UrbanCode Deploy (UCD) 7.0.4.0 stores user credentials in plain in clear text which can be read by a local user. IB…
-
Medium 6.3
The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks capability checks for AJAX actions.
-
Medium 5.8
A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This fla…