Archive
8 July 2020
Vulnerabilities first published on this day (UTC), newest first.
18 results · Feed
-
Unscored —
NVIDIA JetPack SDK, version 4.2 and 4.3, contains a vulnerability in its installation scripts in which permissions are …
-
Unscored —
An issue was discovered in phpList through 3.5.4. An error-based SQL Injection vulnerability exists via the Import Admi…
-
Unscored —
An issue was discovered in phpList through 3.5.4. An XSS vulnerability occurs within the Import Administrators section …
-
Unscored —
The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit th…
-
Unscored —
The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit th…
-
Unscored —
The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit th…
-
High 8.1CVE-2020-2034 Public exploit
PAN-OS: OS command injection vulnerability in GlobalProtect portal
An OS Command Injection vulnerability in the PAN-OS GlobalProtect portal allows an unauthenticated network based attacker to execute arbitrary OS commands with root privileges. An attacker requires some knowledge of the firewall to exploit this issue. This is…
-
Medium 4.9
PAN-OS: Integer underflow in the management interface
An integer underflow vulnerability in the dnsproxyd component of the PAN-OS management interface allows authenticated administrators to issue a command from the command line interface that causes the component to stop responding. Repeated attempts to send thi…
-
Medium 4.8
PAN-OS: TLS 1.0 usage for certain communications with Palo Alto Networks cloud delivered services
Certain communication between PAN-OS and cloud-delivered services inadvertently use TLS 1.0, which is known to be a cryptographically weak protocol. These cloud services include Cortex Data Lake, the Customer Support Portal, and the Prisma Access infrastructu…
-
High 7.2
PAN-OS: OS command injection vulnerability in the management interface
An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts PAN-OS 8.1 versions earlier than PAN-OS 8.1.15; and all versions of PAN…
-
High 7.5
Server side template injection in Apache Camel
Server-Side Template Injection and arbitrary file disclosure on Camel templating components
-
Unscored —CVE-2020-5839 Public exploit
Symantec Endpoint Detection And Response, prior to 4.4, may be susceptible to an information disclosure issue, which is…
-
Unscored —
A sensitive information disclosure vulnerability in Tableau Server 10.5, 2018.x, 2019.x, 2020.x released before June 26…
-
Unscored —
The VeloCloud Orchestrator does not apply correct input validation which allows for blind SQL-injection. A malicious ac…
-
Unscored —
A security vulnerability in HPE IceWall SSO Dfw and Dgfw (Domain Gateway Option) could be exploited remotely to cause a…
-
Unscored —
MX Player Android App versions prior to v1.24.5, are vulnerable to a directory traversal vulnerability when user is usi…
-
Unscored —
Elevation of privilege and unauthorized access in Micro Focus Identity Manager product
Elevation of privilege and/or unauthorized access vulnerability in Micro Focus Identity Manager. Affecting versions prior to 4.7.3 and 4.8.1 hot fix 1. The vulnerability could allow information exposure that can result in an elevation of privilege or an unaut…
-
Critical 9.8
GeoVision Door Access Control Device - Buffer overflow vulnerability
Buffer overflow exists in Geovision Door Access Control device family, an unauthenticated remote attacker can execute arbitrary command.