Archive
24 June 2020
Vulnerabilities first published on this day (UTC), newest first.
66 results · Feed
-
Unscored —CVE-2020-15046 Public exploit
The web interface on Supermicro X10DRH-iT motherboards with BIOS 2.0a and IPMI firmware 03.40 allows remote attackers t…
-
Medium —
img_auth.php may leak private extension images into the public cache
In MediaWiki before 1.31.8, 1.32.x and 1.33.x before 1.33.4, and 1.34.x before 1.34.2, private wikis behind a caching server using the img_auth.php image authorization security feature may have had their files cached publicly, so any unauthorized user could v…
-
Unscored —
PHP-Fusion 9.03.60 allows XSS via the administration/site_links.php Add Site Link field.
-
Unscored —
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component, in whi…
-
Unscored —CVE-2020-15038 Public exploit
The SeedProd coming-soon plugin before 5.1.1 for WordPress allows XSS.
-
Unscored —
BooleBox Secure File Sharing Utility before 4.2.3.0 allows CSV injection via a crafted user name that is mishandled dur…
-
Unscored —
Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file d…
-
Unscored —
BooleBox Secure File Sharing Utility before 4.2.3.0 allows stored XSS via a crafted avatar field within My Account JSON…
-
Medium 4.4
ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory…
-
Medium —
Directory traversal outside of SENDFILE_ROOT in django-sendfile2
django-sendfile2 currently relies on the backend to correctly limit file paths to `SENDFILE_ROOT`. This is not the case for the `simple` and `development` backends, it is also not necessarily the case for any of the other backends either (it's just an assumpt…
-
Unscored —
On Draytek Vigor3900, Vigor2960, and Vigor 300B devices before 1.5.1.1, there are some command-injection vulnerabilitie…
-
Unscored —
Stack-based buffer overflow vulnerability in Vigor3900, Vigor2960, and Vigor300B with firmware before 1.5.1.1.
-
Unscored —
An issue was discovered on Xiaomi Mi Jia ink-jet printer < 3.4.6_0138. Injecting parameters to ippserver through the we…
-
Unscored —
Xiaomi router R3600 ROM before 1.0.50 is affected by a sensitive information leakage caused by an insecure interface ge…
-
Unscored —
Xiaomi router R3600 ROM before 1.0.50 is affected by a vulnerability when checking backup file in c_upload interface le…
-
Unscored —
An unsafe configuration of nginx lead to information leak in Xiaomi router R3600 ROM before 1.0.50.
-
Unscored —
VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG),…
-
Unscored —
VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG),…
-
Unscored —
In Xiaomi router R3600, ROM version<1.0.20, the connection service can be injected through the web interface, resulting…
-
Unscored —
The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. An attacker could exploit …
-
Unscored —
Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.10, and 8.0.0 to 8.0.7 is vulnerable to certain types of HTTP/2 HEAD…
-
Unscored —
In Xiaomi router R3600, ROM version<1.0.20, a connect service suffers from an injection vulnerability through the web i…
-
Unscored —
ExpressionEngine before 5.3.2 allows remote attackers to upload and execute arbitrary code in a .php%20 file via Compos…
-
Unscored —CVE-2020-13483 Scanner template
The Web Application Firewall in Bitrix24 through 20.0.0 allows XSS via the items[ITEMS][ID] parameter to the components…
-
Unscored —
Bitrix24 through 20.0.975 allows SSRF via an intranet IP address in the services/main/ajax.php?action=attachUrlPreview …
-
High 7.5
acf-to-rest-api plugin insecure direct object reference (IDOR) via permalink manipulation
An issue was discovered in the acf-to-rest-api plugin through 3.1.0 for WordPress. It allows an insecure direct object reference via permalinks manipulation, as demonstrated by a wp-json/acf/v3/options/ request that reads sensitive information in the wp_optio…
-
Unscored —
An issue was discovered in Navigate CMS 2.9 r1433. There is a stored XSS vulnerability that is executed on the page to …
-
Unscored —
An issue was discovered in Navigate CMS 2.9 r1433. Sessions, as well as associated information such as CSRF tokens, are…
-
Unscored —
An issue was discovered in Navigate CMS 2.9 r1433. The forgot-password feature allows users to reset their passwords by…
-
Medium 6.1
GleamTech FileUltimate Cross-site Scripting
The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document.
-
Unscored —
An issue was discovered in Navigate CMS 2.9 r1433. When performing a password reset, a user is emailed an activation co…
-
Unscored —
An issue was discovered in Navigate CMS 2.8 and 2.9 r1433. The query parameter fid on the resource navigate.php does no…
-
Medium 5.9
IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information, caused by the failure to…
-
Medium 5.3
IBM Security Secret Server 10.7 could disclose sensitive information included in installation files to an unauthorized …
-
Low 2.7
IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical…
-
Medium 6.1
IBM Security Secret Server 10.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra…
-
Low 2.7
IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical…
-
Medium 4.3
IBM Security Secret Server 10.7 could allow a remote attacker to hijack the clicking action of the victim. By persuadin…
-
Unscored —CVE-2020-14005 EPSS 14%
Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote attackers to e…
-
Unscored —
Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a Responsible…