Archive
July 2020
Vulnerabilities first published in this month (UTC), newest first.
1,428 results · Feed
-
Medium 5.3
IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 could disclose sensitive information due to responding to unauthenticate…
-
Medium 5.3
IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive information when a det…
-
High 7.4
IBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by default, which makes it ea…
-
Medium 6.5
IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 uses a protection mechanism that relies on the existence or values of an…
-
High 8.6
IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 uses an inadequate account lockout setting that could allow a remote att…
-
High 8.2
IBM Maximo Asset Management 7.6.0.1 and 7.6.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when pro…
-
Critical 9.4
OpenClinic GA
OpenClinic GA 5.09.02 contains a hidden default user account that may be accessed if an administrator has not expressly turned off this account, which may allow an attacker to login and execute arbitrary commands.
-
Medium 6.3
OpenClinic GA
An attacker may bypass permission/authorization checks in OpenClinic GA 5.09.02 and 5.89.05b by ignoring the redirect of a permission failure, which may allow unauthorized execution of commands.
-
Unscored —
Passwords are stored in plain text within the configuration of SICK Package Analytics software up to and including V04.…
-
Unscored —
SICK Package Analytics software up to and including version V04.0.0 are vulnerable due to incorrect default permissions…
-
Unscored —
SICK Package Analytics software up to and including version V04.0.0 are vulnerable to an authentication bypass by direc…
-
High 8.8
OpenClinic GA
OpenClinic GA 5.09.02 and 5.89.05b does not properly verify uploaded files, which may allow a low-privilege user to upload and execute arbitrary files on the system.
-
Critical 9.8
Command Injection
This affects all versions of package mock2easy. a malicious user could inject commands through the _data variable: Affected Area require('../server/getJsonByCurl')(mock2easy, function (error, stdout) { if (error) { return res.json(500, error); } res.json(JSON…
-
High 8.1
Command Injection
This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sanitized.
-
Medium 5.4
OpenClinic GA
OpenClinic GA 5.09.02 and 5.89.05b does not properly neutralize user-controllable input, which may allow the execution of malicious code within the user’s browser.
-
High 8.8
OpenClinic GA
A low-privilege user may use SQL syntax to write arbitrary files to the OpenClinic GA 5.09.02 and 5.89.05b server, which may allow the execution of arbitrary commands.
-
High 8.8
OpenClinic GA
OpenClinic GA 5.09.02 and 5.89.05b includes arbitrary local files specified within its parameter and executes some files, which may allow disclosure of sensitive files or the execution of malicious uploaded files.
-
Medium 6.2
OpenClinic GA
OpenClinic GA 5.09.02 and 5.89.05b stores passwords using inadequate hashing complexity, which may allow an attacker to recover passwords using known password cracking techniques.
-
Unscored —
This module enables you to hand out permissions on a smaller subset, section or community of your website. The module u…
-
Critical 9.6
Magento DOM-based Cross-site scripting vulnerability
Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a dom-based cross-site scripting vulnerability. Successful exploitation could lead to arbitrary code execution.
-
Medium 6.5
Magento security mitigation bypass vulnerability
Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.
-
Medium 4.2
Magento observable timing discrepancy vulnerability
Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have an observable timing discrepancy vulnerability. Successful exploitation could lead to signature verification bypass.
-
Medium 6.5
Magento path traversal vulnerability
Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a path traversal vulnerability. Successful exploitation could lead to arbitrary code execution.
-
Unscored —
Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary files via uns…
-
Unscored —
Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script…
-
Unscored —
Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script…
-
High 7.5
An exploitable denial of service vulnerability exists in the freeDiameter functionality of freeDiameter 1.3.2. A specia…
-
Unscored —
Gambio GX before 4.0.1.0 allows SQL Injection in admin/gv_mail.php.
-
Unscored —
Gambio GX before 4.0.1.0 allows SQL Injection in admin/mobile.php.
-
Unscored —
Gambio GX before 4.0.1.0 allows admin/admin.php CSRF.
-
Unscored —
Gambio GX before 4.0.1.0 allows XSS in admin/coupon_admin.php.
-
Unscored —
NCP Secure Enterprise Client before 10.15 r47589 allows a symbolic link attack on enumusb.reg via Support Assistant.
-
High 7.2
Unrestricted Uploads in Concrete5
Concrete5 before 8.5.3 allows Unrestricted Upload of File with Dangerous Type such as a .phar file.
-
High 8.8
Shopware vulnerable to SSRF
Shopware before 6.2.3 is vulnerable to a Server-Side Request Forgery (SSRF) in its "Mediabrowser upload by URL" feature. This allows an authenticated user to send HTTP, HTTPS, FTP, and SFTP requests on behalf of the Shopware platform server.
-
Medium 5.4
Shopware vulnerable to Cross-site Scripting
In Shopware before 6.2.3, authenticated users are allowed to use the Mediabrowser fileupload feature to upload SVG images containing JavaScript. This leads to Persistent XSS. An uploaded image can be accessed without authentication.
-
High 7.5
Shopware database password is leaked to an unauthenticated users
In Shopware before 6.2.3, the database password is leaked to an unauthenticated user when a DriverException occurs and verbose error handling is enabled.
-
Unscored —
In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because…
-
Critical 9.1
Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities.…
-
High 8.8CVE-2020-15416 Public exploit
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R670…
-
Medium 6.3
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R67…