Archive
June 2020
Vulnerabilities first published in this month (UTC), newest first.
1,813 results · Feed
-
Unscored —
In doSendObjectInfo of MtpServer.cpp, there is a possible path traversal attack due to insufficient input validation. T…
-
Unscored —
In hevcd_fmt_conv_420sp_to_420sp_av8 of ihevcd_fmt_conv_420sp_to_420sp.s, there is a possible out of bounds write due t…
-
Unscored —
In removeSharedAccountAsUser of AccountManager.java, there is a possible permissions bypass to a confused deputy. This …
-
Unscored —
In BnAAudioService::onTransact of IAAudioService.cpp, there is a possible out of bounds read due to unsafe deserializat…
-
Unscored —
In ihevcd_parse_slice_header of ihevcd_parse_slice_header.c, there is a possible out of bounds write due to an integer …
-
Unscored —
In BnDrm::onTransact of IDrm.cpp, there is a possible information disclosure due to uninitialized data. This could lead…
-
Unscored —CVE-2020-0209 Public exploit
In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalati…
-
Unscored —
In impeg2_fmt_conv_yuv420p_to_yuv420sp_uv of impeg2_format_conv.c, there is a possible out of bounds write due to a mis…
-
Unscored —
In GetOpusHeaderBuffers() of OpusHeader.cpp, there is a possible out of bounds read due to a missing bounds check. This…
-
Unscored —
In addPacket of AMPEG4ElementaryAssembler, there is an out of bounds read due to an integer overflow. This could lead t…
-
Unscored —
In parseChunk of MPEG4Extractor.cpp, there is a possible out of bounds write due to incompletely initialized data. This…
-
Unscored —
In OutputBuffersArray::realloc of CCodecBuffers.cpp, there is a possible heap disclosure due to a race condition. This …
-
Unscored —CVE-2020-0192 Public exploit
In ih264d_decode_slice_thread of ih264d_thread_parse_decode.c, there is a possible out of bounds read due to improper i…
-
Unscored —
In multiple functions in DrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to …
-
Unscored —
In multiple functions of AccountManager.java, there is a possible permissions bypass. This could lead to local escalati…
-
Unscored —CVE-2020-0203 Public exploit
In freeIsolatedUidLocked of ProcessList.java, there is a possible UID reuse due to improper cleanup. This could lead to…
-
Unscored —
In markBootComplete of InstalldNativeService.cpp, there is a possible out of bounds write due to a missing bounds check…
-
Unscored —
In engineSetMode of BaseBlockCipher.java, there is a possible incorrect cryptographic algorithm chosen due to an incomp…
-
Unscored —
In multiple functions of URI.java, there is a possible escalation of privilege due to missing validation in the parceli…
-
Unscored —
An exploitable code execution vulnerability exists in the Web-Based Management (WBM) functionality of WAGO PFC 200 03.0…
-
Unscored —
"HCL Digital Experience is susceptible to Server Side Request Forgery."
-
Unscored —CVE-2020-12712 Public exploit
A vulnerability based on insecure user/password encryption in the JOE (job editor) component of SOS JobScheduler 1.12 a…
-
Medium 5.4
IBM Workload Scheduler 9.3.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar…
-
Unscored —
Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a…
-
Unscored —
Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary J…
-
Unscored —
Artica Pandora FMS 7.44 allows remote command execution via the events feature.
-
Unscored —CVE-2020-13852 EPSS 28%
Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Manager feature.
-
Unscored —
Artica Pandora FMS 7.44 has persistent XSS in the Messages feature.
-
Unscored —
Artica Pandora FMS 7.44 allows privilege escalation.
-
Unscored —CVE-2020-13855 EPSS 28%
Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Repository Mana…
-
Unscored —
Artica Pandora FMS 7.44 has inadequate access controls on a web folder.
-
High 7.5
Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on …
-
Unscored —
The following vulnerability applies only to the Pydio Cells Enterprise OVF version 2.0.4. Prior versions of the Pydio C…
-
Unscored —
An issue was discovered in CipherMail Community Gateway Virtual Appliances and Professional/Enterprise Gateway Virtual …
-
Unscored —
An issue was discovered in CipherMail Community Gateway and Professional/Enterprise Gateway 1.0.1 through 4.7.1-0 and C…
-
High 7.5
Uncontrolled Resource Consumption in Indy Node
In Indy Node 1.12.2, there is an Uncontrolled Resource Consumption vulnerability. Indy Node has a bug in TAA handling code. The current primary can be crashed with a malformed transaction from a client, which leads to a view change. Repeated rapid view change…
-
Unscored —
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_merge in sdp.c has a stack…
-
Unscored —
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_preparse in sdp.c has a NU…
-
Unscored —
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_process_incoming_request in ja…
-
Unscored —
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_process in sdp.c has a NUL…