Archive
June 2020
Vulnerabilities first published in this month (UTC), newest first.
1,813 results · Feed
-
Unscored —
An issue was discovered in Sysax Multi Server 6.90. An attacker can determine the username (under which the web server …
-
Medium 6.1
MediaWiki Open Redirect vulnerability
resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.35 allows remote attackers to force a logout and external redirection via HTML content in a MediaWiki page.
-
Unscored —CVE-2020-13228 Public exploit
An issue was discovered in Sysax Multi Server 6.90. There is reflected XSS via the /scgi sid parameter.
-
Medium 5.4
IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…
-
Medium 6.1
IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…
-
Medium 5.9
IBM Planning Analytics Local 2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to dec…
-
Medium 5.4
IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…
-
Medium 6.1
IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…
-
Unscored —
An issue was discovered in Sysax Multi Server 6.90. A session can be hijacked if one observes the sid value in any /scg…
-
Medium 6.0CVE-2020-13401 Public exploit
Improper Input Validation in Docker Engine
An issue was discovered in Docker Engine before 19.03.11. An attacker in a container, with the CAP_NET_RAW capability, can craft IPv6 router advertisements, and consequently spoof external IPv6 hosts, obtain sensitive information, or cause a denial of service.
-
Unscored —
hw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access via a crafted address in an msi-x …
-
Unscored —
address_space_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to BounceBuffer.
-
High 7.5
Istio 1.4.x before 1.4.9 and Istio 1.5.x before 1.5.4 contain the following vulnerability when telemetry v2 is enabled:…
-
Unscored —
IP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network traffic
IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packet…
-
Medium 6.5
A NULL pointer dereference was found in the libvirt API responsible introduced in upstream version 3.10.0, and fixed in…
-
Medium 6.3
An Insecure Temporary File vulnerability in FortiClient for Windows 6.2.1 and below may allow a local user to gain elev…
-
Unscored —
An improper input validation in FortiAP-S/W2 6.2.0 to 6.2.2, 6.0.5 and below, FortiAP-U 6.0.1 and below CLI admin conso…
-
Unscored —
modules/security/classes/general.post_filter.php/post_filter.php in the Web Application Firewall in Bitrix24 through 20…
-
High 7.5
Python-RSA decryption of ciphertext leads to DoS
Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affect…
-
Unscored —
In QuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8, the local www-data user has sudo privileges …
-
Unscored —
system/classes/DbPDO.php in Cmfive through 2015-03-15, when database connectivity malfunctions, allows remote attackers…
-
Unscored —
FarLinX X25 Gateway through 2014-09-25 allows command injection via shell metacharacters to sysSaveMonitorData.php, fsx…
-
Unscored —
FarLinX X25 Gateway through 2014-09-25 allows attackers to write arbitrary data to fsUI.xyz via fsSaveUIPersistence.php.
-
Unscored —
FarLinX X25 Gateway through 2014-09-25 allows directory traversal via the log-handling feature.
-
Unscored —
Lexiglot through 2014-11-20 allows SQL injection via an admin.php?page=users&from_id= or admin.php?page=history&limit= …
-
Unscored —
Lexiglot through 2014-11-20 allows CSRF.
-
Unscored —
Lexiglot through 2014-11-20 allows SSRF via the admin.php?page=projects svn_url parameter.
-
Unscored —
Lexiglot through 2014-11-20 allows XSS (Reflected) via the username, or XSS (Stored) via the admin.php?page=config inst…
-
Unscored —
Lexiglot through 2014-11-20 allows denial of service because api/update.php launches svn update operations that use a g…
-
Unscored —
Lexiglot through 2014-11-20 allows local users to obtain sensitive information by listing a process because the usernam…
-
Unscored —
Lexiglot through 2014-11-20 allows remote attackers to obtain sensitive information (full path) via an include/smarty/p…
-
Unscored —
Lexiglot through 2014-11-20 allows remote attackers to obtain sensitive information (names and details of projects) by …
-
Unscored —
admin.php?page=projects in Lexiglot through 2014-11-20 allows command injection via username and password fields.
-
Unscored —
The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, wh…
-
Unscored —
In QuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8, the local www-data user can execute sudo mys…
-
Unscored —
QuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8 allows an authenticated remote attacker to execu…
-
High 8.1
Insecure serialization leading to RCE in serialize-javascript
serialize-javascript prior to 3.1.0 allows remote attackers to inject arbitrary code via the function "deleteFunctions" within "index.js".
-
Unscored —
There is a few bytes out-of-bounds read vulnerability in some Huawei products. The software reads data past the end of …
-
Unscored —
A NULL pointer dereference in sanei_epson_net_read in SANE Backends before 1.0.30 allows a malicious device connected t…
-
Unscored —
p_lx_elf.cpp in UPX before 3.96 has an integer overflow during unpacking via crafted values in a PT_DYNAMIC segment.