Archive
5 July 2020
Vulnerabilities first published on this day (UTC), newest first.
13 results · Feed
-
Unscored —
SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution.
-
Unscored —
SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path.
-
Unscored —
SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command.
-
Unscored —
An issue was discovered in the bestsoftinc Car Rental System plugin through 1.3 for WordPress. Persistent XSS can occur…
-
Unscored —
An issue was discovered in the bestsoftinc Hotel Booking System Pro plugin through 1.1 for WordPress. Persistent XSS ca…
-
Unscored —
An issue was discovered in the Vanguard plugin 2.1 for WordPress. XSS can occur via the mails/new title field, a produc…
-
Unscored —
XSS can occur in We-com Municipality portal CMS 2.1.x via the cerca/ search bar.
-
Unscored —
SQL injection can occur in We-com Municipality portal CMS 2.1.x via the cerca/ keywords field.
-
Unscored —
We-com OpenData CMS 2.0 allows SQL Injection via the username field on the administrator login page.
-
Unscored —
In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/p…
-
Unscored —
An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user starts or u…
-
Unscored —
An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user installs a …
-
Unscored —
An issue was discovered in Valve Steam Client 2.10.91.91. The installer allows local users to gain NT AUTHORITY\SYSTEM …