Archive
24 April 2020
Vulnerabilities first published on this day (UTC), newest first.
70 results · Feed
-
Unscored —
The Advanced Woo Search plugin version through 1.99 for Wordpress suffers from a sensitive information disclosure vulne…
-
Medium 5.4
Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP (versio…
-
Medium 6.1
SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_PHTMLB, versions 700, 701, 702, 730, 731, 740, 750…
-
High 7.7
SQL Injection in Admidio
SQL Injection was discovered in Admidio before version 3.3.13. The main cookie parameter is concatenated into a SQL query without any input validation/sanitization, thus an attacker without logging in, can send a GET request with arbitrary SQL queries appende…
-
Medium 6.1
Grafana XSS in header column rename
Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip.
-
High 8.5
lookup Function Information Discolosure in Helm
Their is an information disclosure vulnerability in Helm from version 3.1.0 and before version 3.2.0. `lookup` is a Helm template function introduced in Helm v3. It is able to lookup resources in the cluster to check for the existence of specific resources an…
-
Unscored —
A remote access to sensitive data vulnerability was discovered in HPE IOT + GCP version(s): 1.4.0, 1.4.1, 1.4.2, 1.2.4.…
-
Unscored —
A unauthorized remote access vulnerability was discovered in HPE IOT + GCP version(s): 1.4.0, 1.4.1, 1.4.2, 1.2.4.2.
-
Medium 5.9
A flaw was found in openshift-ansible. OpenShift Container Platform (OCP) 3.11 is too permissive in the way it specifie…
-
Unscored —
This document describes a security vulnerability in Blade Maintenance Entity, Integrated Maintenance Entity and Mainten…
-
High 8.1CVE-2020-6819 Exploited
Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are a…
KEV Nov 3, 2021 -
High 8.1CVE-2020-6820 Exploited
Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of …
KEV Nov 3, 2021 -
Unscored —
When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method…
-
Unscored —
On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in <code>GMPDeco…
-
Unscored —
A malicious extension could have called <code>browser.identity.launchWebAuthFlow</code>, controlling the redirect_uri, …
-
Unscored —
Initially, a user opens a Private Browsing Window and generates a password for a site, then closes the Private Browsing…
-
Unscored —
Mozilla developers Tyson Smith, Bob Clary, and Alexandru Michis reported memory safety bugs present in Firefox 74. Some…
-
Unscored —
Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefo…
-
Medium 5.3
IBM MQ and MQ Appliance 8.0, 9.1 LTS, and 9.1 CD could allow an authenticated user cause a denial of service due to a m…
-
Medium 5.3
IBM Cloud App Management 2019.3.0 and 2019.4.0 reveals a stack trace on certain API requests which can allow an attacke…
-
Medium 4.3
IBM Cloud App Management 2019.3.0 and 2019.4.0 is vulnerable to cross-site request forgery which could allow an attacke…
-
Unscored —
When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android coul…
-
Unscored —
A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potenti…
-
Medium 6.8
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34,…
-
Medium 6.8
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34,…
-
Medium 5.3
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R7500v2 before 1.0.3…
-
Medium 5.2
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D1500 before 1.0.0.2…
-
Medium 5.2
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D1500 before 1.0.0.2…
-
Medium 6.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 befo…
-
Medium 6.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6100 befo…
-
Medium 6.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 befo…
-
Medium 5.2
Certain NETGEAR devices are affected by stored XSS. This affects D6400 before 1.0.0.60, D7000 before 1.0.1.50, D8500 be…
-
Medium 5.2
Certain NETGEAR devices are affected by reflected XSS. This affects R6700 before 1.0.1.36 and R6900 before 1.0.1.34.
-
Medium 5.2
NETGEAR R6220 devices before 1.1.0.60 are affected by incorrect configuration of security settings.
-
High 8.8
Certain NETGEAR devices are affected by CSRF. This affects D1500 before 1.0.0.25, D500 before 1.0.0.25, D6100 before 1.…
-
Medium 6.5
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D6220 before 1.0.0.…
-
High 8.8
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.2…
-
Medium 6.5
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6100 before 1.0.1.2…
-
Medium 6.8
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R8300 before 1.0.2.106…
-
High 8.8
Certain NETGEAR devices are affected by CSRF. This affects R8300 before 1.0.2.94 and R8500 before 1.0.2.94.