Archive
18 May 2020
Vulnerabilities first published on this day (UTC), newest first.
40 results · Feed
-
Unscored —
In Ivanti WorkSpace Control before 10.4.40.0, a user can elevate rights on the system by hijacking certain user registr…
-
Unscored —
Zoho ManageEngine Service Plus before 11.1 build 11112 allows low-privilege authenticated users to discover the File Pr…
-
Unscored —
A use-after-free is possible due to an error in lifetime management in the request adaptor when a malicious client invo…
-
Unscored —
app/View/Events/resolved_attributes.ctp in MISP before 2.4.126 has XSS in the resolved attributes view.
-
Medium 5.4
-
Unscored —
Weak permissions on the "%PROGRAMDATA%\MSI\Dragon Center" folder in Dragon Center before 2.6.2003.2401, shipped with Mi…
-
Unscored —
Studio in Open edX Ironwood 2.5 allows users to upload SVG files via the "Content>File Uploads" screen. These files can…
-
Unscored —
Studio in Open edX Ironwood 2.5 allows CSV injection because an added cohort in Course>Instructor>Cohorts may contain a…
-
Unscored —
Studio in Open edX Ironwood 2.5, when CodeJail is not used, allows a user to go to the "Create New course>New section>N…
-
Unscored —
gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup wi…
-
Unscored —
A Reflected XSS was found in the server selection box inside the login page at: enginemanager/loginfailed.html in Wowza…
-
Unscored —
An arbitrary file download was found in the "Download Log" functionality of Wowza Streaming Engine <= 4.x.x. This issue…
-
Medium 6.5
An exploitable information disclosure vulnerability exists in the way Nitro Pro 13.9.1.155 does XML error handling. A s…
-
High 8.8CVE-2020-6092 EPSS 43%
An exploitable code execution vulnerability exists in the way Nitro Pro 13.9.1.155 parses Pattern objects. A specially …
-
High 8.8CVE-2020-6074 EPSS 42%
An exploitable code execution vulnerability exists in the PDF parser of Nitro Pro 13.9.1.155. A specially crafted PDF d…
-
Unscored —
Gollem before 3.0.13, as used in Horde Groupware Webmail Edition 5.2.22 and other products, is affected by a reflected …
-
Unscored —
D-Link DSP-W215 1.26b03 devices allow information disclosure by intercepting messages on the local network, as demonstr…
-
Unscored —
D-Link DSP-W215 1.26b03 devices send an obfuscated hash that can be retrieved and understood by a network sniffer.
-
Unscored —
An issue was discovered in atillk64.sys in AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility 5.11.9.0. …
-
Unscored —
An issue was discovered in AODDriver2.sys in AMD OverDrive. The vulnerable driver exposes a wrmsr instruction via IOCTL…
-
High 8.3
An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Sate…
-
High 7.4
An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Sate…
-
Critical 9.6
An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Sate…
-
Unscored —
The image view functionality in Horde Groupware Webmail Edition before 5.2.22 is affected by a stored Cross-Site Script…
-
Unscored —
Crash-recovered MSOffice encrypted documents defaulted to not to using encryption on next save
If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted. On restart, LibreOffice offers to restore the document and prompts for the password to decrypt it. If the recovery is successful, and if the file format of the r…
-
Unscored —
rConfig 3.9.4 is vulnerable to remote code execution due to improper validation in the file upload functionality. vendo…
-
Unscored —
rConfig 3.9.4 is vulnerable to reflected XSS. The devicemgmnt.php file improperly validates user input. An attacker can…
-
Medium 5.3
In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission process by sending mail w…
-
Medium 5.3
In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after-free bug in submission-lo…
-
High 7.5
In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Der…
-
Unscored —
rConfig 3.9.4 is vulnerable to cross-site request forgery (CSRF) because it lacks implementation of CSRF protection suc…
-
Unscored —
Cross Site scripting vulnerability on Micro Focus Enterprise Server and Enterprise developer, affecting all versions pr…
-
Unscored —
rConfig 3.9.4 is vulnerable to session fixation because session expiry and randomization are mishandled. The applicatio…
-
Unscored —
rConfig 3.9.4 is vulnerable to reflected XSS. The configDevice.php file improperly validates user input. An attacker ca…
-
Unscored —
An issue was discovered in the stashcat app through 3.9.1 for macOS, Windows, Android, iOS, and possibly other platform…
-
Unscored —
COVIDSafe through v1.0.17 allows a remote attacker to access phone name and model information because a BLE device can …
-
Unscored —
Unnecessary fields in the OpenTrace/BlueTrace protocol in COVIDSafe through v1.0.17 allow a remote attacker to identify…
-
Unscored —
Non-reinitialisation of random data in the advertising payload in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacke…
-
Unscored —
Caching of GATT characteristic values (TempID) in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to long-term r…
-
Unscored —CVE-2020-12856 Public exploit
OpenTrace, as used in COVIDSafe through v1.0.17, TraceTogether, ABTraceTogether, and other applications on iOS and Andr…