Archive
7 May 2020
Vulnerabilities first published on this day (UTC), newest first.
77 results · Feed
-
Unscored —
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-s…
-
Unscored —
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-s…
-
Unscored —
Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross…
-
Unscored —
Cross-site request forgery in TCExam 14.2.2 allows a remote attacker to perform sensitive application actions by tricki…
-
Unscored —
The documentation component in i-net Clear Reports 16.0 to 19.2, HelpDesk 8.0 to 8.3, and PDFC 4.3 to 6.2 allows a remo…
-
Unscored —
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-s…
-
Unscored —
Improper Control of Resource Identifiers in TCExam 14.2.2 allows a remote, authenticated attacker to access test metada…
-
Unscored —
Relative Path Traversal in TCExam 14.2.2 allows a remote, authenticated attacker to read the contents of arbitrary file…
-
Unscored —
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-s…
-
Unscored —
Katyshop2 before 2.12 has multiple stored XSS issues.
-
High 8.8
Command injection via specially crafted file name during config file upload
Improper Input Validation in Eaton's Intelligent Power Manager (IPM) v 1.67 & prior on file name during configuration file import functionality allows attackers to perform command injection or code execution via specially crafted file names while uploading th…
-
High 7.8
Incorrect privilege assignment allowing non-admin users to upload config files
Incorrect Privilege Assignment vulnerability in Eaton's Intelligent Power Manager (IPM) v1.67 & prior allow non-admin users to upload the system configuration files by sending specially crafted requests. This can result in non-admin users manipulating the sys…
-
Unscored —
An issue was discovered in Serpico before 1.3.3. The /admin/attacments_backup endpoint can be requested by non-admin au…
-
Unscored —
An arbitrary file write issue exists in all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, i…
-
Unscored —
An unauthenticated arbitrary file read issue exists in all versions of Citrix ShareFile StorageZones (aka storage zones…
-
Unscored —
In certain situations, all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most…
-
Unscored —
Leftover Debug Code in Blaauw Remote Kiln Control through v3.00r4 allows a user to execute arbitrary php code via /defa…
-
Unscored —
A path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenti…
-
Unscored —
A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows an authent…
-
Unscored —
Weak password requirements in Blaauw Remote Kiln Control through v3.00r4 allow a user to set short or guessable passwor…
-
Unscored —
Unauthenticated SQL injection via the username in the login mechanism in Blaauw Remote Kiln Control through v3.00r4 all…
-
Unscored —
/server-info and /server-status in Blaauw Remote Kiln Control through v3.00r4 allow an unauthenticated attacker to gain…
-
Unscored —
Browsable directories in Blaauw Remote Kiln Control through v3.00r4 allow an attacker to enumerate sensitive filenames …
-
Unscored —
Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to access MySQL credentials in cleartext …
-
Unscored —
Information disclosure via error message discrepancies in authentication functions in Blaauw Remote Kiln Control throug…
-
Unscored —
ATTO FibreBridge 7500N firmware versions prior to 2.90 are susceptible to a vulnerability which allows an unauthenticat…
-
Unscored —
On NGINX Controller versions 3.1.0-3.3.0, AVRD uses world-readable and world-writable permissions on its socket, which …
-
Unscored —
On versions 3.0.0-3.3.0, the NGINX Controller webserver does not invalidate the server-side session token after users l…
-
Critical 9.9
An exploitable code execution vulnerability exists in the PLC_Task functionality of 3S-Smart Software Solutions GmbH CO…
-
Unscored —CVE-2020-12696 Public exploit
The iframe plugin before 4.5 for WordPress does not sanitize a URL.
-
Low 2.2
Out-of-bounds Read in FreeRDPrdp_read_flow_control_pdu
In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bounds read. It only allows to abort a session. No data extraction is possible. This has been fixed in 2.0.0.
-
Low 2.2
Out-of-bounds Read in FreeRDP
In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bound read in in update_read_bitmap_data that allows client memory to be read to an image buffer. The result displayed on screen as colour.
-
Medium 5.5
Out-of-bounds Read in FreeRDP
In FreeRDP greater than 1.1 and before 2.0.0, there is an out-of-bounds read in update_read_icon_info. It allows reading a attacker-defined amount of client memory (32bit unsigned -> 4GB) to an intermediate buffer. This can be used to crash the client or stor…
-
Medium 5.5
Out-of-bounds Read in FreeRDPrdp_read_share_control_header
In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bound read of client memory that is then passed on to the protocol parser. This has been patched in 2.0.0.
-
Medium 5.5
Improper Restriction of Operations within the Bounds of a Memory Buffer in FreeRDP
In FreeRDP after 1.0 and before 2.0.0, there is a stream out-of-bounds seek in update_read_synchronize that could lead to a later out-of-bounds read.
-
Low 2.2
Double Free in FreeRDP
In FreeRDP greater than 1.2 and before 2.0.0, a double free in update_read_cache_bitmap_v3_order crashes the client application if corrupted data from a manipulated server is parsed. This has been patched in 2.0.0.
-
Medium 5.5
Out-of-bounds Read in FreeRDP
In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bounds read in autodetect_recv_bandwidth_measure_results. A malicious server can extract up to 8 bytes of client memory with a manipulated message by providing a short input and reading the measurement…