Archive
4 June 2020
Vulnerabilities first published on this day (UTC), newest first.
100 results · Feed
-
Unscored —
An issue was discovered on LG mobile devices with Android OS software before 2020-06-01. Local users can cause a denial…
-
Unscored —
An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). A dangerous AT co…
-
Unscored —
An issue was discovered on LG mobile devices with Android OS 9 and 10 (MTK chipsets). An AT command handler allows atta…
-
Unscored —
An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). Code execution ca…
-
Unscored —
An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). Code execution ca…
-
Medium 6.3
Kubernetes kube-controller-manager SSRF
The Kubernetes kube-controller-manager in versions v1.0-1.14, versions prior to v1.15.12, v1.16.9, v1.17.5, and version v1.18.0 are vulnerable to a Server Side Request Forgery (SSRF) that allows certain authorized users to leak up to 500 bytes of arbitrary in…
-
Unscored —CVE-2020-13768 Public exploit
In MiniShare before 1.4.2, there is a stack-based buffer overflow via an HTTP PUT request, which allows an attacker to …
-
Unscored —
The MQTT protocol 3.1.1 requires a server to set a timeout value of 1.5 times the Keep-Alive value specified by a clien…
-
Unscored —
Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a c…
-
Unscored —
Pydio Cells 2.0.4 web application offers an administrative console named “Cells Console” that is available to users wit…
-
Unscored —
Pydio Cells 2.0.4 allows an authenticated user to write or overwrite existing files in another user’s personal and cell…
-
Unscored —
The update feature for Pydio Cells 2.0.4 allows an administrator user to set a custom update URL and the public RSA key…
-
Unscored —
Castel NextGen DVR v1.0.0 is vulnerable to CSRF in all state-changing request. A __RequestVerificationToken is set by t…
-
Unscored —
Pydio Cells 2.0.4 allows XSS. A malicious user can either upload or create a new file that contains potentially malicio…
-
Unscored —
Castel NextGen DVR v1.0.0 stores and displays credentials for the associated SMTP server in cleartext. Low privileged u…
-
Unscored —
Castel NextGen DVR v1.0.0 is vulnerable to authorization bypass on all administrator functionality. The application fai…
-
Unscored —
Castel NextGen DVR v1.0.0 is vulnerable to privilege escalation through the Adminstrator/Users/Edit/:UserId functionali…
-
Medium 5.5
A flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for ARM introduced in vers…
-
High 7.5CVE-2020-7661 Public exploit
Regular expression denial of service in url-regex
all versions of url-regex are vulnerable to Regular Expression Denial of Service. An attacker providing a very long string in String.test can cause a Denial of Service.
-
Unscored —
An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Attackers can disable the SEAndroid…
-
Unscored —
An issue was discovered on Samsung mobile devices with P(9.0) software. One UI HOME logging can leak information. The S…
-
Unscored —
An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 7570 chipsets) software. The Trustonic…
-
Unscored —
An issue was discovered on Samsung mobile devices with Q(10.0) (with TEEGRIS on Exynos chipsets) software. The Widevine…
-
Unscored —
An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The system area allows arb…
-
Unscored —
An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (with TEEGRIS) software. Secure Fold…
-
Unscored —
An issue was discovered on Samsung mobile devices with O(8.x) (with TEEGRIS) software. The Gatekeeper Trustlet allows a…
-
Unscored —
An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. HWRResProvider allows path…
-
Unscored —
An issue was discovered on Samsung mobile devices with Q(10.0) software. The Lockscreen feature does not block Quick Pa…
-
Unscored —
An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. The DeX Lockscreen feature does not…
-
Unscored —
An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a buffer overflow because a looping correction does n…
-
Unscored —
An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a NULL pointer dereference via FXSYS_wcslen in an Epu…
-
Unscored —
An issue was discovered in Foxit PhantomPDF before 8.3.11. It has an out-of-bounds write when Internet Explorer is used.
-
Unscored —
An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It has a NULL pointer derefere…
-
Unscored —
An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It allows stack consumption be…
-
Unscored —
An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a buffer overflow because a looping correctio…
-
Unscored —
An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a NULL pointer dereference via FXSYS_wcslen i…
-
Unscored —
An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has an out-of-bounds write when Internet Explorer…
-
Unscored —
An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.5.0.20733. It has void data mish…
-
Unscored —
An issue was discovered in Foxit PhantomPDF before 8.3.10. It has homograph mishandling.
-
Unscored —
An issue was discovered in Foxit PhantomPDF before 8.3.10. It has mishandling of cloud credentials, as demonstrated by …