Archive
May 2020
Vulnerabilities first published in this month (UTC), newest first.
1,032 results · Feed
-
Unscored —
We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabiliti…
-
Unscored —
We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabiliti…
-
Unscored —
We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabiliti…
-
Medium 6.5
HTTP Request Smuggling in Undertow
A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling.
-
Medium 6.1
A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed …
-
Medium 4.8
bbPress stored Cross-Site Scripting (XSS) vulnerability in the Forum creation section
The bbPress plugin through 2.6.4 for WordPress has stored XSS in the Forum creation section, resulting in JavaScript execution at wp-admin/edit.php?post_type=forum (aka the Forum listing page) for all users. An administrator can exploit this at the wp-admin/p…
-
Unscored —
qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability.
-
Unscored —
qmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A local attacker can test fo…
-
Unscored —
crate has been renamed to `block-cipher`
This crate has been renamed from `block-cipher-trait` to `block-cipher`. The new repository location is at: <https://github.com/RustCrypto/traits/tree/master/block-cipher>
-
Critical 9.1
Knock Knock plugin IP Whitelist bypass via an X-Forwarded-For HTTP header
The Knock Knock plugin before 1.2.8 for Craft CMS allows IP Whitelist bypass via an X-Forwarded-For HTTP header.
-
Medium 6.1
Knock Knock plugin Open redirection vulnerability
The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.
-
High 7.4
Improper Certificate Validation in EM-HTTP-Request
EM-HTTP-Request 1.1.5 uses the library eventmachine in an insecure way that allows an attacker to perform a man-in-the-middle attack against users of the library. The hostname in a TLS server certificate is not verified.
-
High 8.8
Image Resizer Cross-Site Request Forgery (CSRF)
An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There are CSRF issues with the log-clear controller action.
-
Medium 5.4
Image Resizer Cross-site Scripting (XSS) in the Bulk Resize action
An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize action.
-
Unscored —
A Remote code execution vulnerability exists in DEXT5Upload in DEXT5 through 2.7.1402870. An attacker can upload a PHP …
-
Unscored —
Cybozu Desktop for Windows 2.0.23 to 2.2.40 allows remote code execution via unspecified vectors.
-
Unscored —
ffjpeg through 2020-02-24 has an invalid read in jfif_encode in jfif.c.
-
Unscored —
ffjpeg through 2020-02-24 has an invalid write in bmp_load in bmp.c.
-
Unscored —
ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfif_decode in jfif.c.
-
Unscored —
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
-
Unscored —
SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.
-
Unscored —
Jason2605 AdminPanel 4.0 allows SQL Injection via the editPlayer.php hidden parameter.
-
Unscored —
legend.ts in the piechart-panel (aka Pie Chart Panel) plugin before 1.5.0 for Grafana allows XSS via the Values Header …
-
Medium 6.1
Grafana XSS via the OpenTSDB datasource
Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.
-
Unscored —
TrackR devices through 2020-05-06 allow attackers to trigger the Beep (aka alarm) feature, which will eventually cause …
-
Unscored —CVE-2020-13424 Public exploit
The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure.
-
Unscored —
An issue was discovered in Aviatrix Controller before 5.4.1204. An API call on the web interface lacked a session token…
-
Unscored —
An issue was discovered in Aviatrix Controller before 5.4.1204. There is a Observable Response Discrepancy from the API…
-
Unscored —
An issue was discovered in Aviatrix Controller before 5.4.1204. It contains credentials unused by the software.
-
Unscored —
An issue was discovered in Aviatrix Controller through 5.1. An attacker with any signed SAML assertion from the Identit…
-
Unscored —
An issue was discovered in Aviatrix Controller before 5.4.1066. A Controller Web Interface session token parameter is n…
-
Unscored —
An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for C…
-
Unscored —
By encoding Unicode whitespace characters within the From email header, an attacker can spoof the sender email address …
-
Critical 9.8
OS Command Injection in jw.util
An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command e…
-
Unscored —
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.4…
-
Unscored —
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.4…
-
Unscored —
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.4…
-
Unscored —
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.4…
-
Unscored —
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.4…
-
Unscored —
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.4…