Archive
14 May 2020
Vulnerabilities first published on this day (UTC), newest first.
70 results · Feed
-
Unscored —
Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC communication does not include any credentials. This allows an a…
-
Unscored —
Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC does not specify the path of multiple imported .dll files. There…
-
Unscored —
Opto 22 SoftPAC Project Version 9.6 and prior. SoftPACAgent communicates with SoftPACMonitor over network Port 22000. H…
-
Unscored —
Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC’s firmware files’ signatures are not verified upon firmware upda…
-
Unscored —
An issue was discovered in CODESYS Development System before 3.5.16.0. CODESYS WebVisu and CODESYS Remote TargetVisu ar…
-
Unscored —
Opto 22 SoftPAC Project Version 9.6 and prior. Paths specified within the zip files used to update the SoftPAC firmware…
-
Unscored —
Airbrush FW's scratch memory allocator is susceptible to numeric overflow. When the overflow occurs, the next allocatio…
-
Unscored —
In crus_afe_callback of msm-cirrus-playback.c, there is a possible out of bounds write due to a missing bounds check. T…
-
Unscored —
In onTransact of IHDCP.cpp, there is a possible out of bounds read due to incorrect error handling. This could lead to …
-
Unscored —
An improper authorization while processing the provisioning data.Product: AndroidVersions: Android SoCAndroid ID: A-149…
-
Unscored —
An improper authorization in the receiver component of the Android Suite Daemon.Product: AndroidVersions: Android SoCAn…
-
Unscored —
An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-1498130…
-
Unscored —
In mnld, an incorrect configuration in driver_cfg of mnld for meta factory mode.Product: AndroidVersions: Android SoCAn…
-
Unscored —
In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This…
-
Unscored —
In getCellLocation of PhoneInterfaceManager.java, there is a possible permission bypass due to a missing SDK version ch…
-
Unscored —
In setImageHeight and setImageWidth of ExifUtils.cpp, there is a possible out of bounds write due to an incorrect bound…
-
Unscored —
In psi_write of psi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local …
-
Unscored —
In a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc, there is a possible invalid free due to memory corruption. This cou…
-
Unscored —
In simulatePackageSuspendBroadcast of NotificationManagerService.java, there is a missing permission check. This could …
-
Unscored —
In various methods of PackageManagerService.java, there is a possible permission bypass due to a missing condition for …
-
Unscored —CVE-2020-0096 Public exploit
In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deput…
-
Unscored —
In setHideSensitive of NotificationStackScrollLayout.java, there is a possible disclosure of sensitive notification con…
-
Unscored —
In BnCrypto::onTransact of ICrypto.cpp, there is a possible information disclosure due to uninitialized data. This coul…
-
Unscored —
In onShowingStateChanged of KeyguardStateMonitor.java, there is a possible inappropriate read due to a logic error. Thi…
-
Unscored —
In navigateUpToLocked of ActivityStack.java, there is a possible permission bypass due to a confused deputy. This could…
-
Unscored —
In onKeyguardVisibilityChanged of key_store_service.cpp, there is a missing permission check. This could lead to local …
-
Unscored —
In GattServer::SendResponse of gatt_server.cc, there is a possible out of bounds write due to an incorrect bounds check…
-
Unscored —
In onCreate of SettingsBaseActivity.java, there is a possible unauthorized setting modification due to a permissions by…
-
Medium 6.5
Veritas APTARE versions prior to 10.4 included code that bypassed the normal login process when specific authentication…
-
Medium 6.3
Veritas APTARE versions prior to 10.4 did not perform adequate authorization checks. An authenticated user could gain u…
-
High 7.5
Veritas APTARE versions prior to 10.4 allowed sensitive information to be accessible without authentication.
-
Medium 5.3
Veritas APTARE versions prior to 10.4 allowed remote users to access several unintended files on the server. This vulne…
-
Unscored —
An issue was discovered in Progress MOVEit Automation Web Admin. A Web Admin application endpoint failed to adequately …
-
Medium 6.5
Dictionary attack with Spring Security queryable text encryptor
Spring Security versions 5.3.x prior to 5.3.2, 5.2.x prior to 5.2.4, 5.1.x prior to 5.1.10, 5.0.x prior to 5.0.16 and 4.2.x prior to 4.2.16 use a fixed null initialization vector with CBC Mode in the implementation of the queryable text encryptor. A malicious…
-
Medium 6.1
Apache ActiveMQ webconsole admin GUI is open to XSS
In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue.
-
Critical 9.8
Deserialization of Untrusted Data in Apache Camel RabbitMQ
Apache Camel RabbitMQ enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 are affected. 2.x users should upgrade to 2.25.1, 3.x users should upgrade to 3.2.0.
-
Critical 9.8
Apache Camel Netty enables Java deserialization by default
Apache Camel Netty enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 are affected. 2.x users should upgrade to 2.25.1, 3.x users should upgrade to 3.2.0.
-
Unscored —
An issue was discovered in all versions of Bond JetSelect. Within the JetSelect Application, the web interface hides RA…
-
High 7.5CVE-2020-11971 EPSS 14%
Improper Input Validation in Apache Camel
Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.x, 3.0.0 up to 3.1.0 is affected. Users should upgrade to 3.2.0.
-
Unscored —
Bond JetSelect (all versions) has an issue in the Java class (ENCtool.jar) and corresponding password generation algori…