Archive
17 July 2020
Vulnerabilities first published on this day (UTC), newest first.
73 results · Feed
-
Unscored —
Huawei Mate 30 Pro smartphones with versions earlier than 10.1.0.150(C00E136R5P3) have an improper authorization vulner…
-
Unscored —
There is an out-of-bounds write vulnerability in some products. An unauthenticated attacker crafts malformed packets wi…
-
Unscored —
There is a information leak vulnerability in some Huawei products, and it could allow a local attacker to get informati…
-
Unscored —
Huawei Honor 10 smartphones with versions earlier than 10.0.0.178(C00E178R1P4) have a denial of service vulnerability. …
-
Unscored —
Huawei Honor V30 smartphones with versions earlier than 10.1.0.212(C00E210R5P1) have an improper authentication vulnera…
-
Unscored —
HUAWEI Mate 20 versions earlier than 10.1.0.160(C00E160R3P8), HUAWEI Mate 20 X versions earlier than 10.1.0.135(C00E135…
-
Unscored —
HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(…
-
Unscored —
HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(…
-
Unscored —
Huawei Smart Phones Moana-AL00B with versions earlier than 10.1.0.166 have a missing initialization of resource vulnera…
-
Unscored —
Grundfos CIM 500 before v06.16.00 responds to unauthenticated requests for password storage files.
-
Unscored —
Insufficient output sanitization in Teltonika firmware TRB2_R_00.02.02 allows a remote, authenticated attacker to condu…
-
Unscored —
Cross-site request forgery in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8 allows a remote attac…
-
Unscored —
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Icegram Email Subscribers & New…
-
Unscored —
HP nagios plugin for iLO (nagios-plugins-hpilo v1.50 and earlier) has a php code injection vulnerability.
-
Unscored —
HPE has found a potential Remote Access Restriction Bypass in HPE MSE Msg Gw application E-LTU prior to version 3.2 whe…
-
High 7.8
DaviewIndy Heap Overflow Vulnerability
DaviewIndy 8.98.9 and earlier has a Heap-based overflow vulnerability, triggered when the user opens a malformed PDF file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.
-
Unscored —
HCL BigFix WebUI is vulnerable to stored cross-site scripting (XSS) within the Apps->Software module. An attacker can u…
-
Medium 6.8
Possible pod name collisions in jupyterhub-kubespawner
In jupyterhub-kubespawner before 0.12, certain usernames will be able to craft particular server names which will grant them access to the default server of other users who have matching usernames. This has been fixed in 0.12.
-
Unscored —
Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via SSH. An authe…
-
Unscored —
Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An auth…
-
Unscored —
Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An auth…
-
High 7.1
SQL Injection in glpi
In glpi before 9.5.1, there is a SQL injection for all usages of "Clone" feature. This has been fixed in 9.5.1.
-
Unscored —
Grandstream GWN7000 firmware version 1.0.9.4 and below allows authenticated remote users to modify the system's crontab…
-
Unscored —
There is a possible out of bounds write due to an incorrect bounds check. Product: AndroidVersions: Android SoCAndroid …
-
Unscored —
There is a possible out of bounds write due to an incorrect bounds check. Product: AndroidVersions: Android SoCAndroid …
-
Unscored —
There is an improper configuration of recorder related service. Product: AndroidVersions: Android SoCAndroid ID: A-1563…
-
Unscored —CVE-2020-0226 Public exploit
In createWithSurfaceParent of Client.cpp, there is a possible out of bounds write due to type confusion. This could lea…
-
Unscored —
In FastKeyAccumulator::GetKeysSlow of keys.cc, there is a possible out of bounds write due to type confusion. This coul…
-
Unscored —
In the permission declaration for com.google.android.providers.gsf.permission.WRITE_GSERVICES in AndroidManifest.xml, t…
-
Unscored —
In getUiccCardsInfo of PhoneInterfaceManager.java, there is a possible permissions bypass due to improper input validat…
-
Unscored —CVE-2020-0225 Public exploit
In a2dp_vendor_ldac_decoder_decode_packet of a2dp_vendor_ldac_decoder.cc, there is a possible out of bounds write due t…
-
Unscored —CVE-2020-0227 Public exploit
In onCommand of CompanionDeviceManagerService.java, there is a possible permissions bypass due to a missing permission …
-
Unscored —
In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalat…
-
Unscored —
In notifyErrorForPendingRequests of QCamera3HWI.cpp, there is a possible out of bounds write due to a heap buffer overf…
-
Unscored —
In Western Digital WD Discovery before 4.0.251.0, a malicious application running with standard user permissions could …
-
Unscored —
"HCL Campaign is vulnerable to cross-site scripting when a user provides XSS scripts in Campaign Description field."
-
Unscored —
"HCL Marketing Platform is vulnerable to cross-site scripting during addition of new users and also while searching for…
-
Medium 5.3
Junos OS: MX Series: PFE crash on MPC7/8/9 upon receipt of large packets requiring fragmentation
When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2TP, MAP-E, GRE, and IPIP, the packet forwarding engine (PFE) will become disabled upon receipt of la…
-
Critical 9.8
Junos OS: SRX Series: processing a malformed HTTP message when ICAP redirect service is enabled may can lead to flowd process crash or remote code execution
On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, processing a malformed HTTP message can lead to a Denial of Service (DoS) or Remote Code Execution (RCE) Continued processing of this malformed HTTP mess…
-
High 7.5
Junos OS: Kernel crash (vmcore) or FPC crash due to mbuf leak
On Juniper Networks Junos OS devices, a stream of TCP packets sent to the Routing Engine (RE) may cause mbuf leak which can lead to Flexible PIC Concentrator (FPC) crash or the system to crash and restart (vmcore). This issue can be trigged by IPv4 or IPv6 an…