Archive
August 2020
Vulnerabilities first published in this month (UTC), newest first.
1,173 results · Feed
-
High 8.6
Cisco FXOS and NX-OS Software Cisco Fabric Services Denial of Service Vulnerability
A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated attacker to cause process crashes, which could result in a denial of service (DoS) condition on an affected device. The attac…
-
High 7.5
Cisco NX-OS Software IPv6 Protocol Independent Multicast Denial of Service Vulnerability
A vulnerability in the Protocol Independent Multicast (PIM) feature for IPv6 networks (PIM6) of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due t…
-
High 7.8
Cisco Nexus 3000 and 9000 Series Switches Privilege Escalation Vulnerability
A vulnerability in the Enable Secret feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker to issue the enable command and get full administrative privileges. To …
-
High 8.6
Cisco NX-OS Software Border Gateway Protocol Multicast VPN Denial of Service Vulnerability
A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to unexpectedly reload, resulting in a denial of service (DoS) conditi…
-
High 8.6
Cisco NX-OS Software Border Gateway Protocol Multicast VPN Session Denial of Service Vulnerability
A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a BGP session to repeatedly reset, causing a partial denial of service (DoS) condition du…
-
High 8.8
Cisco NX-OS Software Data Management Engine Remote Code Execution Vulnerability
A vulnerability in the Data Management Engine (DME) of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with administrative privileges or cause a denial of service (DoS) condition on an affected device. The vuln…
-
High 7.2
Cisco NX-OS Software Call Home Command Injection Vulnerability
A vulnerability in the Call Home feature of Cisco NX-OS Software could allow an authenticated, remote attacker to inject arbitrary commands that could be executed with root privileges on the underlying operating system (OS). The vulnerability is due to insuff…
-
Low 3.3
Cisco UCS Manager Software Local Management CLI Denial of Service Vulnerability
A vulnerability in the local management (local-mgmt) CLI of Cisco UCS Manager Software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of CLI comman…
-
Unscored —
oss_write in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position.
-
Unscored —
On Mercedes-Benz C Class AMG Premium Plus c220 BlueTec vehicles, the Bluetooth stack mishandles %x and %c format-string…
-
Unscored —
Laborator Neon dashboard v3 is affected by stored Cross Site Scripting (XSS) via the chat tab.
-
Unscored —
eonweb in EyesOfNetwork before 5.3-7 does not properly escape the username on the /module/admin_logs page, which might …
-
Unscored —
Michael-design iChat Realtime PHP Live Support System 1.6 has persistent Cross-site Scripting via chat,text-filed tags.
-
Unscored —
Online Hotel Booking System Pro PHP Version 1.3 has Persistent Cross-site Scripting in Customer registration-form all-t…
-
Unscored —
DesignMasterEvents Conference management 1.0.0 has cross site scripting via the 'certificate.php'
-
Unscored —
13enforme CMS 1.0 has Cross Site Scripting via the "content.php" id parameter.
-
Unscored —
13enforme CMS 1.0 has SQL Injection via the 'content.php' id parameter.
-
Unscored —
SQL injection can occur in Soluzione Globale Ecommerce CMS v1 via the parameter " offerta.php"
-
Unscored —
KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter.
-
Unscored —
Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has SQL Injection via the 'content.php' id parameter.
-
Unscored —
Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has cross site scripting via the 'search.php' id parameter.
-
Unscored —
Create-Project Manager 1.07 has Multi Persistent Cross-site Scripting and HTML injection in via Online chat, Social fee…
-
Unscored —
KandNconcepts Club CMS 1.1 and 1.2 has SQL Injection via the 'team.php,player.php,club.php' id parameter.
-
Unscored —
In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating…
-
Unscored —
DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login p…
-
Low 3.3
IBM Security Guardium Insights 2.0.1 performs an operation at a privilege level that is higher than the minimum level r…
-
Medium 4.7
IBM WebSphere Application Server ND 8.5 and 9.0, and IBM WebSphere Virtual Enterprise 7.0 and 8.0 are vulnerable to cro…
-
Low 3.7
IBM Security Guardium Insights 2.0.1 stores sensitive information in URL parameters. This may lead to information discl…
-
Medium 5.9
IBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive information, caused by the failu…
-
Medium 4.3
IBM Security Guardium Insights 2.0.1 allows web pages to be stored locally which can be read by another user on the sys…
-
Medium 5.9
IBM Security Guardium Insights 2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to…
-
Medium 5.3
IBM Security Guardium Insights 2.0.1 could allow a remote attacker to obtain sensitive information when a detailed tech…
-
Medium 6.5
IBM Security Guardium Insights 2.0.1 could allow an attacker to obtain sensitive information or perform unauthorized ac…
-
Medium 5.9
IBM Security Guardium Insights 2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to…
-
Unscored —
IBM WebSphere MQ 7.1 is vulnerable to a denial of service, caused by an error when handling user ids. A remote attacker…
-
Unscored —
IBM Rational Change 5.3 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A …
-
High 8.8
An issue was discovered in certain WSO2 products. A valid Carbon Management Console session cookie may be sent to an at…
-
Medium 6.1
An issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This affects API Manager throug…
-
Medium 6.1
An issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This affects API Manager 2.2.0,…
-
High 8.8
An issue was discovered in certain WSO2 products. A valid Carbon Management Console session cookie may be sent to an at…