Archive
29 June 2020
Vulnerabilities first published on this day (UTC), newest first.
72 results · Feed
-
Unscored —
In the Linux kernel 4.4 through 5.7.6, usbtest_disconnect in drivers/usb/misc/usbtest.c has a memory leak, aka CID-28eb…
-
Unscored —
jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid an…
-
High 7.0
Improper Initialization in coturn
In coturn before version 4.5.1.3, there is an issue whereby STUN/TURN response buffer is not initialized properly. There is a leak of information between different client connections. One client (an attacker) could use their connection to intelligently query …
-
Medium 4.3
Open Redirect in OAuth2 Proxy
In OAuth2 Proxy from version 5.1.1 and less than version 6.0.0, users can provide a redirect address for the proxy to send the authenticated user to at the end of the authentication flow. This is expected to be the original URL that the user was trying to acc…
-
Unscored —
An elevation of privilege vulnerability exists in Avast Free Antivirus and AVG AntiVirus Free before 20.4 due to improp…
-
Unscored —
iBall WRB303N devices allow CSRF attacks, as demonstrated by enabling remote management, enabling DHCP, or modifying th…
-
Unscored —
A vulnerability in Brocade Network Advisor Version Before 14.3.1 could allow an unauthenticated, remote attacker to log…
-
Medium 5.9
The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorith…
-
Critical 9.8
Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks …
KEV Feb 6, 2025 -
Unscored —CVE-2020-13896 EPSS 15%
The web interface of Maipu MP1800X-50 7.5.3.14(R) devices allows remote attackers to obtain sensitive information via t…
-
Unscored —
NeDi 1.9C is vulnerable to Remote Command Execution. pwsec.php improperly escapes shell metacharacters from a POST requ…
-
Unscored —CVE-2020-14413 Scanner template
NeDi 1.9C is vulnerable to XSS because of an incorrect implementation of sanitize() in inc/libmisc.php. This function a…
-
Unscored —
NeDi 1.9C is vulnerable to Remote Command Execution. System-Snapshot.php improperly escapes shell metacharacters from a…
-
Unscored —
An issue was discovered in MK-AUTH 19.01. It allows command execution as root via shell metacharacters to /auth admin s…
-
Unscored —
An issue was discovered in MK-AUTH 19.01. XSS vulnerabilities in admin and client scripts allow an attacker to execute …
-
Unscored —
An issue was discovered in MK-AUTH 19.01. There is authentication bypass in the web login functionality because guessab…
-
Unscored —
An issue was discovered in MK-AUTH 19.01. There are SQL injection issues in mkt/ PHP scripts, as demonstrated by arp.ph…
-
Unscored —
An issue was discovered in MK-AUTH 19.01. The web login functionality allows an attacker to bypass authentication and g…
-
Critical 9.8
OS Command Injection in wifiscanner
wifiscanner.js in thingsSDK WiFi Scanner 1.0.1 allows Code Injection because it can be used with options to overwrite the default executable/binary path and its arguments. An attacker can abuse this functionality to execute arbitrary code.
-
Unscored —
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a world-readable axess/opt/axXMPPHandler/config/xmpp_config.py file that…
-
Unscored —
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the cloud1234 password for the a1@chopin account default credentials.
-
Unscored —
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the wbboEZ4BN3ssxAfM hardcoded password for the debian-sys-maint account.
-
Unscored —
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axzyxel password for the livedbuser account.
-
Unscored —
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axiros password for the root account.
-
Unscored —
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within the /opt/mysql chroo…
-
Unscored —
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within the /opt/mysql chroo…
-
Unscored —
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within the /opt/axess chroo…
-
Critical 10.0
PAN-OS: Authentication Bypass in SAML Authentication
When Security Assertion Markup Language (SAML) authentication is enabled and the 'Validate Identity Provider Certificate' option is disabled (unchecked), improper verification of signatures in PAN-OS SAML authentication enables an unauthenticated network-base…
KEV Mar 25, 2022 -
Unscored —
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account within the /opt/axess chr…
-
Unscored —
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within the /opt/axess chroo…
-
Unscored —
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account.
-
Unscored —
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account.
-
Unscored —
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account.
-
Unscored —
The NetApp HCI H610C, H615C and H610S Baseboard Management Controllers (BMC) are shipped with a documented default acco…
-
Medium 5.4
IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cr…
-
Unscored —
BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes. An att…
-
Unscored —
BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an encrypt…
-
Unscored —
BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK Re…
-
Unscored —
BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recovera…
-
Unscored —
BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest. An attacker wit…