Archive
May 2020
Vulnerabilities first published in this month (UTC), newest first.
1,032 results · Feed
-
Medium 5.3
In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after-free bug in submission-lo…
-
High 7.5
In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Der…
-
Unscored —
rConfig 3.9.4 is vulnerable to cross-site request forgery (CSRF) because it lacks implementation of CSRF protection suc…
-
Unscored —
Cross Site scripting vulnerability on Micro Focus Enterprise Server and Enterprise developer, affecting all versions pr…
-
Unscored —
rConfig 3.9.4 is vulnerable to session fixation because session expiry and randomization are mishandled. The applicatio…
-
Unscored —
rConfig 3.9.4 is vulnerable to reflected XSS. The configDevice.php file improperly validates user input. An attacker ca…
-
Unscored —
An issue was discovered in the stashcat app through 3.9.1 for macOS, Windows, Android, iOS, and possibly other platform…
-
Unscored —
COVIDSafe through v1.0.17 allows a remote attacker to access phone name and model information because a BLE device can …
-
Unscored —
Unnecessary fields in the OpenTrace/BlueTrace protocol in COVIDSafe through v1.0.17 allow a remote attacker to identify…
-
Unscored —
Non-reinitialisation of random data in the advertising payload in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacke…
-
Unscored —
Caching of GATT characteristic values (TempID) in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to long-term r…
-
Unscored —CVE-2020-12856 Public exploit
OpenTrace, as used in COVIDSafe through v1.0.17, TraceTogether, ABTraceTogether, and other applications on iOS and Andr…
-
Unscored —
An issue was discovered in e6y prboom-plus 2.5.1.5. There is a buffer overflow in client and server code responsible fo…
-
Unscored —
An XSS issue was discovered in handler_server_info.c in Cherokee through 1.2.104. The requested URL is improperly displ…
-
Unscored —
In Cherokee through 1.2.104, multiple memory corruption errors may be used by a remote attacker to destabilize the work…
-
Unscored —
In Cherokee through 1.2.104, remote attackers can trigger an out-of-bounds write in cherokee_handler_cgi_add_env_pair i…
-
Unscored —
An issue was discovered in the Readdle Documents app before 6.9.7 for iOS. The application's file-transfer web server a…
-
Unscored —
An issue was discovered in the Readdle Documents app before 6.9.7 for iOS. The application's file-transfer web server i…
-
Unscored —
An issue was discovered in Manolo GWTUpload 1.0.3. server/UploadServlet.java (the servlet for handling file upload) acc…
-
Low 2.9
IBM i 7.2, 7.3, and 7.4 users running complex SQL statements under a specific set of circumstances may allow a local us…
-
High 7.2CVE-2020-13125 Scanner template
An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in the …
-
Critical 9.9
An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild in May 2020 in…
-
Unscored —CVE-2020-13121 Scanner template
Submitty through 20.04.01 has an open redirect via authentication/login?old= during an invalid login attempt.
-
Unscored —CVE-2020-13118 Public exploit
An issue was discovered in Mikrotik-Router-Monitoring-System through 2018-10-22. SQL Injection exists in check_communit…
-
Unscored —
NaviServer 4.99.4 to 4.99.19 allows denial of service due to the nsd/driver.c ChunkedDecode function not properly valid…
-
High 7.8
DLL Injection in kerberos
The kerberos package before 1.0.0 for Node.js allows arbitrary code execution and privilege escalation via injection of malicious DLLs through use of the kerberos_sspi LoadLibrary() method, because of a DLL path search.
-
Critical 9.8
Morita Shogi 64 through 2020-05-02 for Nintendo 64 devices allows remote attackers to execute arbitrary code via crafte…
-
Medium 5.3
Improper Certificate Validation and Improper Validation of Certificate with Host Mismatch in Keycloak
A flaw was found in Keycloak in versions before 10.0.0, where it does not perform the TLS hostname verification while sending emails using the SMTP server. This flaw allows an attacker to perform a man-in-the-middle (MITM) attack.
-
Unscored —
iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal.
-
Critical 9.8
Arbitrary shell command execution in logkitty
Lack of output sanitization allowed an attack to execute arbitrary shell commands via the logkitty npm package before version 0.7.1.
-
Unscored —
pandas through 1.0.3 can unserialize and execute commands from an untrusted file that is passed to the read_pickle() fu…
-
Critical 9.8
scikit-learn Deserialization of Untrusted Data
scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() function, if __reduce__ makes an os.system call. NOTE: third parties dispute this issue because the joblib.load() functio…
-
Unscored —
yaws_config.erl in Yaws through 2.0.2 and/or 2.0.7 loads obsolete TLS ciphers, as demonstrated by ones that allow Sweet…
-
Critical 9.8
Maltego incorrectly shares a MISP connection across users in a remote-transform use case
MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case.
-
Unscored —
Cellebrite UFED 5.0 to 7.5.0.845 implements local operating system policies that can be circumvented to obtain a comman…
-
Unscored —
SecureCRT before 8.7.2 allows remote attackers to execute arbitrary code via an Integer Overflow and a Buffer Overflow …
-
Unscored —
An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player before 3.0.9 allows r…
-
Unscored —
An issue was discovered on D-Link DAP-1360 revision F devices. Remote attackers can start a telnet service without auth…
-
High 8.1
Subrion CMS Cross-Site Request Forgery (CSRF) vulnerability
A Cross-Site Request Forgery (CSRF) vulnerability was discovered in Subrion CMS 4.2.1 that allows a remote attacker to remove files on the server without a victim's knowledge, by enticing an authenticated user to visit an attacker's web page. The application …
-
Medium 6.1
Subrion CMS XSS
An XSS issue was identified on the Subrion CMS 4.2.1 /panel/configuration/general settings page. A remote attacker can inject arbitrary JavaScript code in the v[language_switch] parameter (within multipart/form-data), which is reflected back within a user's b…