Archive
June 2020
Vulnerabilities first published in this month (UTC), newest first.
1,813 results · Feed
-
Critical 9.8
Improper Input Validation in Apache Unomi
Apache Unomi allows conditions to use OGNL scripting which offers the possibility to call static Java classes from the JDK that could execute code with the permission level of the running Java process.
-
Unscored —
Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A craf…
-
Unscored —CVE-2020-10543 EPSS 11%
Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifier…
-
Unscored —CVE-2020-11492 Public exploit
An issue was discovered in Docker Desktop through 2.2.0.5 on Windows. If a local attacker sets up their own named pipe …
-
Unscored —
In Pydio Cells 2.0.4, once an authenticated user shares a file selecting the create a public link option, a hidden shar…
-
Critical 9.8CVE-2020-4450 EPSS 35%
IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on the…
-
High 7.5
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to obtain sensitive i…
-
Medium 5.6
IBM Worklight/MobileFoundation 8.0.0.0 does not properly invalidate session cookies when a user logs out of a session, …
-
Critical 9.8CVE-2020-4448 EPSS 13%
IBM WebSphere Application Server Network Deployment 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arb…
-
Unscored —
Pydio Cells 2.0.4 allows any user to upload a profile image to the web application, including standard and shared user …
-
High 7.2CVE-2020-8103 Public exploit
Link Resolution Privilege Escalation Vulnerability in Bitdefender Antivirus Free (VA-8604)
A vulnerability in the improper handling of symbolic links in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location. This issue affects Bitdefender Antivirus Free versions prior to …
-
Unscored —
XACK DNS 1.11.0 to 1.11.4, 1.10.0 to 1.10.8, 1.8.0 to 1.8.23, 1.7.0 to 1.7.18, and versions before 1.7.0 allow remote a…
-
Unscored —
An issue was discovered on LG mobile devices with Android OS software before 2020-06-01. Local users can cause a denial…
-
Unscored —
An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). A dangerous AT co…
-
Unscored —
An issue was discovered on LG mobile devices with Android OS 9 and 10 (MTK chipsets). An AT command handler allows atta…
-
Unscored —
An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). Code execution ca…
-
Unscored —
An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 (MTK chipsets). Code execution ca…
-
Medium 6.3
Kubernetes kube-controller-manager SSRF
The Kubernetes kube-controller-manager in versions v1.0-1.14, versions prior to v1.15.12, v1.16.9, v1.17.5, and version v1.18.0 are vulnerable to a Server Side Request Forgery (SSRF) that allows certain authorized users to leak up to 500 bytes of arbitrary in…
-
Unscored —CVE-2020-13768 Public exploit
In MiniShare before 1.4.2, there is a stack-based buffer overflow via an HTTP PUT request, which allows an attacker to …
-
Unscored —
The MQTT protocol 3.1.1 requires a server to set a timeout value of 1.5 times the Keep-Alive value specified by a clien…
-
Unscored —
Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attackers to cause a denial of service (crash) via a c…
-
Unscored —
Pydio Cells 2.0.4 web application offers an administrative console named “Cells Console” that is available to users wit…
-
Unscored —
Pydio Cells 2.0.4 allows an authenticated user to write or overwrite existing files in another user’s personal and cell…
-
Unscored —
The update feature for Pydio Cells 2.0.4 allows an administrator user to set a custom update URL and the public RSA key…
-
Unscored —
Castel NextGen DVR v1.0.0 is vulnerable to CSRF in all state-changing request. A __RequestVerificationToken is set by t…
-
Unscored —
Pydio Cells 2.0.4 allows XSS. A malicious user can either upload or create a new file that contains potentially malicio…
-
Unscored —
Castel NextGen DVR v1.0.0 stores and displays credentials for the associated SMTP server in cleartext. Low privileged u…
-
Unscored —
Castel NextGen DVR v1.0.0 is vulnerable to authorization bypass on all administrator functionality. The application fai…
-
Unscored —
Castel NextGen DVR v1.0.0 is vulnerable to privilege escalation through the Adminstrator/Users/Edit/:UserId functionali…
-
Medium 5.5
A flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for ARM introduced in vers…
-
High 7.5CVE-2020-7661 Public exploit
Regular expression denial of service in url-regex
all versions of url-regex are vulnerable to Regular Expression Denial of Service. An attacker providing a very long string in String.test can cause a Denial of Service.
-
Unscored —
An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Attackers can disable the SEAndroid…
-
Unscored —
An issue was discovered on Samsung mobile devices with P(9.0) software. One UI HOME logging can leak information. The S…
-
Unscored —
An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 7570 chipsets) software. The Trustonic…
-
Unscored —
An issue was discovered on Samsung mobile devices with Q(10.0) (with TEEGRIS on Exynos chipsets) software. The Widevine…
-
Unscored —
An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. The system area allows arb…
-
Unscored —
An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (with TEEGRIS) software. Secure Fold…
-
Unscored —
An issue was discovered on Samsung mobile devices with O(8.x) (with TEEGRIS) software. The Gatekeeper Trustlet allows a…
-
Unscored —
An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. HWRResProvider allows path…
-
Unscored —
An issue was discovered on Samsung mobile devices with Q(10.0) software. The Lockscreen feature does not block Quick Pa…