Archive
April 2020
Vulnerabilities first published in this month (UTC), newest first.
592 results · Clear filters · Feed
-
Medium 6.4
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D850…
-
Medium 5.5
Missing Release of Memory after Effective Lifetime in Apache Tika
A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImagePar…
-
Medium 4.3
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information when a detailed techni…
-
Medium 4.8
Croos-site scripting in Croogo
Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies.
-
Medium 5.4
Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP (versio…
-
Medium 6.1
SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_PHTMLB, versions 700, 701, 702, 730, 731, 740, 750…
-
Medium 6.1
Grafana XSS in header column rename
Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip.
-
Medium 5.9
A flaw was found in openshift-ansible. OpenShift Container Platform (OCP) 3.11 is too permissive in the way it specifie…
-
Medium 5.3
IBM MQ and MQ Appliance 8.0, 9.1 LTS, and 9.1 CD could allow an authenticated user cause a denial of service due to a m…
-
Medium 5.3
IBM Cloud App Management 2019.3.0 and 2019.4.0 reveals a stack trace on certain API requests which can allow an attacke…
-
Medium 4.3
IBM Cloud App Management 2019.3.0 and 2019.4.0 is vulnerable to cross-site request forgery which could allow an attacke…
-
Medium 6.8
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34,…
-
Medium 6.8
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34,…
-
Medium 5.3
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R7500v2 before 1.0.3…
-
Medium 5.2
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D1500 before 1.0.0.2…
-
Medium 5.2
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D1500 before 1.0.0.2…
-
Medium 6.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 befo…
-
Medium 6.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6100 befo…
-
Medium 6.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 befo…
-
Medium 5.2
Certain NETGEAR devices are affected by stored XSS. This affects D6400 before 1.0.0.60, D7000 before 1.0.1.50, D8500 be…
-
Medium 5.2
Certain NETGEAR devices are affected by reflected XSS. This affects R6700 before 1.0.1.36 and R6900 before 1.0.1.34.
-
Medium 5.2
NETGEAR R6220 devices before 1.1.0.60 are affected by incorrect configuration of security settings.
-
Medium 6.5
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D6220 before 1.0.0.…
-
Medium 6.5
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6100 before 1.0.1.2…
-
Medium 6.8
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R8300 before 1.0.2.106…
-
Medium 4.0
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R8300 before 1.0.2.9…
-
Medium 4.3
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R8300 before 1.0.2.106 and R8…
-
Medium 6.3
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.2…
-
Medium 6.5
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D7800 before 1.0.1.…
-
Medium 6.5
Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D7800 before 1.0.1.…
-
Medium 6.5
NETGEAR WNDR4500v3 devices before 1.0.0.48 are affected by denial of service.
-
Medium 5.2
Certain NETGEAR devices are affected by reflected XSS. This affects EX3700 before 1.0.0.66, EX3800 before 1.0.0.66, EX6…
-
Medium 6.3
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6100 before 1.0.1.1…
-
Medium 6.5CVE-2019-15793 Public exploit
Mishandling of file-system uid/gid with namespaces in shiftfs
In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, several locations which shift ids translate user/group ids before performing operations in the lower filesystem were translating them into init_user_ns, whe…
-
Medium 4.5
Certain NETGEAR devices are affected by denial of service. This affects R6100 before 1.0.1.22, R7500 before 1.0.0.122, …
-
Medium 4.5
Certain NETGEAR devices are affected by denial of service. This affects R6100 before 1.0.1.22, R7500 before 1.0.0.122, …
-
Medium 6.8
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6220 before 1.1.0.64 …
-
Medium 6.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects DGN2200Bv4…
-
Medium 4.5
Certain NETGEAR devices are affected by denial of service. This affects R6100 before 1.0.1.22, R7500 before 1.0.0.122, …
-
Medium 4.6
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D3600 before 1.0.0.76 and D60…