Archive
July 2020
Vulnerabilities first published in this month (UTC), newest first.
1,428 results · Feed
-
High 8.8
D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability on…
KEV Mar 25, 2022 -
Unscored —
Android App 'Mercari' (Japan version) prior to version 3.52.0 allows arbitrary method execution of a Java object by a r…
-
Unscored —
NVIDIA JetPack SDK, version 4.2 and 4.3, contains a vulnerability in its installation scripts in which permissions are …
-
Unscored —
An issue was discovered in phpList through 3.5.4. An error-based SQL Injection vulnerability exists via the Import Admi…
-
Unscored —
An issue was discovered in phpList through 3.5.4. An XSS vulnerability occurs within the Import Administrators section …
-
Unscored —
The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit th…
-
Unscored —
The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit th…
-
Unscored —
The SIP module of some Huawei products have a denial of service (DoS) vulnerability. A remote attacker could exploit th…
-
High 8.1CVE-2020-2034 Public exploit
PAN-OS: OS command injection vulnerability in GlobalProtect portal
An OS Command Injection vulnerability in the PAN-OS GlobalProtect portal allows an unauthenticated network based attacker to execute arbitrary OS commands with root privileges. An attacker requires some knowledge of the firewall to exploit this issue. This is…
-
Medium 4.9
PAN-OS: Integer underflow in the management interface
An integer underflow vulnerability in the dnsproxyd component of the PAN-OS management interface allows authenticated administrators to issue a command from the command line interface that causes the component to stop responding. Repeated attempts to send thi…
-
Medium 4.8
PAN-OS: TLS 1.0 usage for certain communications with Palo Alto Networks cloud delivered services
Certain communication between PAN-OS and cloud-delivered services inadvertently use TLS 1.0, which is known to be a cryptographically weak protocol. These cloud services include Cortex Data Lake, the Customer Support Portal, and the Prisma Access infrastructu…
-
High 7.2
PAN-OS: OS command injection vulnerability in the management interface
An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts PAN-OS 8.1 versions earlier than PAN-OS 8.1.15; and all versions of PAN…
-
High 7.5
Server side template injection in Apache Camel
Server-Side Template Injection and arbitrary file disclosure on Camel templating components
-
Unscored —CVE-2020-5839 Public exploit
Symantec Endpoint Detection And Response, prior to 4.4, may be susceptible to an information disclosure issue, which is…
-
Unscored —
A sensitive information disclosure vulnerability in Tableau Server 10.5, 2018.x, 2019.x, 2020.x released before June 26…
-
Unscored —
The VeloCloud Orchestrator does not apply correct input validation which allows for blind SQL-injection. A malicious ac…
-
Unscored —
A security vulnerability in HPE IceWall SSO Dfw and Dgfw (Domain Gateway Option) could be exploited remotely to cause a…
-
Unscored —
MX Player Android App versions prior to v1.24.5, are vulnerable to a directory traversal vulnerability when user is usi…
-
Unscored —
Elevation of privilege and unauthorized access in Micro Focus Identity Manager product
Elevation of privilege and/or unauthorized access vulnerability in Micro Focus Identity Manager. Affecting versions prior to 4.7.3 and 4.8.1 hot fix 1. The vulnerability could allow information exposure that can result in an elevation of privilege or an unaut…
-
Critical 9.8
GeoVision Door Access Control Device - Buffer overflow vulnerability
Buffer overflow exists in Geovision Door Access Control device family, an unauthenticated remote attacker can execute arbitrary command.
-
Unscored —CVE-2020-15600 Public exploit
An issue was discovered in CMSUno before 1.6.1. uno.php allows CSRF to change the admin password.
-
Unscored —CVE-2020-15599 Public exploit
Victor CMS through 2019-02-28 allows XSS via the register.php user_firstname or user_lastname field.
-
Medium 5.0
Memory leak in wpanctl can lead to DoS
A memory leak in Openthread's wpantund versions up to commit 0e5d1601febb869f583e944785e5685c6c747be7, when used in an environment where wpanctl is directly interfacing with the control driver (eg: debug environments) can allow an attacker to crash the servic…
-
Unscored —
A SQLi exists in the probe code of all Connectwise Automate versions before 2020.7 or 2019.12. A SQL Injection in the p…
-
Unscored —
Code42 environments with on-premises server versions 7.0.4 and earlier allow for possible remote code execution. When a…
-
Unscored —
SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with …
-
Unscored —
SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records with ajax ph…
-
Unscored —
SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with aj…
-
Unscored —
Gossipsub 1.0 does not properly resist invalid message spam, such as an eclipse attack or a sybil attack.
-
Medium 5.3
Sensitive information exposure through logs in npm-registry-fetch
Affected versions of `npm-registry-fetch` are vulnerable to an information exposure vulnerability through log files. The cli supports URLs like `<protocol>://[<user>[:<password>]@]<hostname>[:<port>][:][/]<path>`. The password value is not redacted and is pri…
-
Medium 4.4
Sensitive information exposure through logs in npm cli
Versions of the npm CLI prior to 6.14.6 are vulnerable to an information exposure vulnerability through log files. The CLI supports URLs like "<protocol>://[<user>[:<password>]@]<hostname>[:<port>][:][/]<path>". The password value is not redacted and is print…
-
Unscored —
WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter.
-
High —
Denial of service due to reference expansion in versions earlier than 4.0
### Impact The CBOR library supports optional tags that enable CBOR objects to contain references to objects within them. Versions earlier than 4.0 resolved those references automatically. While this by itself doesn't cause much of a security problem, a denia…
-
Unscored —
RIOT 2020.04 has a buffer overflow in the base64 decoder. The decoding function base64_decode() uses an output buffer e…
-
Medium 5.9
Potentially sensitive data exposure in Symfony Web Socket Bundle
### Impact Inside `Gos\Bundle\WebSocketBundle\Server\App\Dispatcher\TopicDispatcher::onPublish()`, messages are arbitrarily broadcasted to the related Topic if `Gos\Bundle\WebSocketBundle\Server\App\Dispatcher\TopicDispatcher::dispatch()` does not succeed. Th…
-
Medium 6.1
DOM-based cross-site scripting in Froala Editor
Froala Editor before 3.2.3 allows XSS.
-
Unscored —
The O2 Business application 1.2.0 for Android exposes the canvasm.myo2.SplashActivity activity to other applications. T…
-
Unscored —
NeDi 1.9C is vulnerable to a cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary…
-
Unscored —
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary J…
-
Unscored —
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary J…