Archive
April 2020
Vulnerabilities first published in this month (UTC), newest first.
592 results · Clear filters · Feed
-
Medium 6.8
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.75,…
-
Medium 5.4
Dolibarr stored Cross-site Scripting vulnerability
In Dolibarr 10.0.6, if USER_LOGIN_FAILED is active, there is a stored XSS vulnerability on the admin tools --> audit page. This may lead to stealing of the admin account.
-
Medium 6.5
Negative charge in shopping cart possible in Shopizer
In Shopizer before version 2.11.0, using API or Controller based versions negative quantity is not adequately validated hence creating incorrect shopping cart and order total. This vulnerability makes it possible to create a negative total in the shopping car…
-
Medium 6.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 befo…
-
Medium 6.8
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.44,…
-
Medium 4.8
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.47, EX2700 before 1.0.1.48, EX6100v…
-
Medium 4.8
Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D7800 be…
-
Medium 6.8
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.48,…
-
Medium 6.8
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6220 before 1.0.0.48,…
-
Medium 4.3
Certain NETGEAR devices are affected by denial of service. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D…
-
Medium 6.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects DGN2…
-
Medium 4.8
Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6100 be…
-
Medium 4.8
Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D7800 be…
-
Medium 6.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D8500 befo…
-
Medium 6.8
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.52,…
-
Medium 5.1
IBM MQ 9.1.4 could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqra…
-
Medium 5.9
IBM MQ 9.0 and 9.1 is vulnerable to a denial of service attack due to an error in the Channel processing function. IBM …
-
Medium 6.3
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76,…
-
Medium 6.3
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76,…
-
Medium 6.3
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76,…
-
Medium 6.3
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76,…
-
Medium 5.6
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D622…
-
Medium 6.5
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WAC505 before 8.0.5.5 and WAC…
-
Medium 5.3
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects GS728TP before 6.0.0.48, GS72…
-
Medium 5.4
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC505 before 8.0.6.…
-
Medium 6.3
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D622…
-
Medium 6.8
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6000 before 1.0.0.75,…
-
Medium 6.8
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.75,…
-
Medium 6.5
Certain NETGEAR devices are affected by denial of service. This affects D6200 before 1.1.00.34, D7000 before 1.0.1.70, …
-
Medium 4.3
Credentials stored in plain text by Jenkins Copr Plugin
Jenkins Copr Plugin 0.3 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
-
Medium 6.1
Machine-In-The-Middle in https-proxy-agent
Versions of `https-proxy-agent` prior to 2.2.3 are vulnerable to Machine-In-The-Middle. The package fails to enforce TLS on the socket if the proxy server responds the to the request with a HTTP status different than 200. This allows an attacker with access t…
-
Medium 6.0
Certain NETGEAR devices are affected by stored XSS. This affects RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 be…
-
Medium 6.0
Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK5…
-
Medium 6.0
Certain NETGEAR devices are affected by lack of access control at the function level. This affects FS728TLP before 1.0.…
-
Medium 6.0
Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK5…
-
Medium 6.0
Certain NETGEAR devices are affected by stored XSS. This affects RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 be…
-
Medium 6.0
Certain NETGEAR devices are affected by stored XSS. This affects RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 be…
-
Medium 6.0
Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK5…
-
Medium 6.0
Certain NETGEAR devices are affected by stored XSS. This affects RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK20 be…
-
Medium 6.0
Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK5…