Archive
September 2020
Vulnerabilities first published in this month (UTC), newest first.
77 results · Clear filters · Feed
-
High 7.5
Denial of service in Apache OpenMeetings
Attackers can use public NetTest web service of Apache OpenMeetings 4.0.0-5.0.0 to organize denial of service attack.
-
High 7.5CVE-2020-26160 Public exploit
Authorization bypass in github.com/dgrijalva/jwt-go
jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m["aud"] (which is allowed by the specification). Because the type assertion fails, "" is the value of aud. This is a security problem if th…
-
Unscored —
The custom GINA/CP module in Zoho ManageEngine ADSelfService Plus before 5.5 build 5517 allows remote attackers to exec…
-
Unscored —CVE-2018-5354 Public exploit
The custom GINA/CP module in ANIXIS Password Reset Client before version 3.22 allows remote attackers to execute code a…
-
Unscored —
An issue was discovered in SourceCodester Seat Reservation System 1.0. The file admin_class.php does not perform input …
-
Unscored —CVE-2020-25134 Public exploit
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory tra…
-
Unscored —CVE-2020-13995 Public exploit
U.S. Air Force Sensor Data Management System extract75 has a buffer overflow that leads to code execution. An overflow …
-
Unscored —CVE-2020-15394 Public exploit
The REST API in Zoho ManageEngine Applications Manager before build 14740 allows an unauthenticated SQL Injection via a…
-
Unscored —CVE-2020-25749 Public exploit
The Telnet service of Rubetek cameras RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339) could allow …
-
Unscored —CVE-2020-25748 Public exploit
A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342,…
-
Unscored —CVE-2020-25747 Public exploit
The Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339) can allow a remote a…
-
Critical 9.8
A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511…
KEV Mar 25, 2022 -
Unscored —
Blind SQL Injection in PrestaShop
PrestaShop from version 1.7.5.0 and before version 1.7.6.8 is vulnerable to a blind SQL Injection attack in the Catalog Product edition page with location parameter. The problem is fixed in 1.7.6.8
-
Medium 6.1CVE-2020-15930 Public exploit
Cross-site Scripting in Joplin
An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag.
-
Unscored —
An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic …
-
High 7.5
Cisco Small Business Switches Information Disclosure Vulnerability
A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information. The vulnerability exists because the software lacks proper authentication controls to information accessible…
-
Unscored —
An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. Th…
-
Unscored —CVE-2020-11855 Public exploit
An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. Th…
-
Unscored —CVE-2020-16171 Public exploit
An issue was discovered in Acronis Cyber Backup before 12.5 Build 16342. Some API endpoints on port 9877 under /api/ams…
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field…
-
Unscored —
Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP arch…
-
Unscored —
An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. It does not validate all URLs before requestin…
-
High 8.7
RFD Protection Bypass via jsessionid
In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid pa…
-
Critical 9.8CVE-2020-8158 Public exploit
TypeORM vulnerable to MAID and Prototype Pollution
Prototype pollution vulnerability in the TypeORM package < 0.2.25 may allow attackers to add or modify Object properties leading to further denial of service or SQL injection attacks.
-
Unscored —CVE-2020-13260 Public exploit
A vulnerability in the web-based management interface of RAD SecFlow-1v through 2020-05-21 could allow an authenticated…
-
High 8.1CVE-2020-24750 Public exploit
Unsafe Deserialization in jackson-databind
FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfiguration.
-
Unscored —CVE-2020-11700 Public exploit
An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter fname, used on the page certs-x…
-
Unscored —CVE-2020-11699 Public exploit
An issue was discovered in Titan SpamTitan 7.07. Improper validation of the parameter fname on the page certs-x.php wou…
-
Unscored —
An issue was discovered in Titan SpamTitan 7.07. Improper input sanitization of the parameter community on the page snm…
-
Unscored —CVE-2020-11804 Public exploit
An issue was discovered in Titan SpamTitan 7.07. Due to improper sanitization of the parameter quid, used in the page m…
-
Unscored —CVE-2020-11803 Public exploit
An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with t…
-
Unscored —CVE-2020-0391 Public exploit
In applyPolicy of PackageManagerService.java, there is possible arbitrary command execution as System due to an unenfor…
-
Unscored —CVE-2020-0394 Public exploit
In onCreate of BluetoothPairingDialog.java, there is a possible tapjacking vector due to an insecure default value. Thi…
-
Unscored —CVE-2020-0245 Public exploit
In DecodeFrameCombinedMode of combined_decode.cpp, there is a possible out of bounds write due to a heap buffer overflo…
-
Unscored —CVE-2020-0401 Public exploit
In setInstallerPackageName of PackageManagerService.java, there is a missing permission check. This could lead to local…
-
Unscored —CVE-2020-0392 Public exploit
In getLayerDebugInfo of SurfaceFlinger.cpp, there is a possible code execution due to a double free. This could lead to…
-
Unscored —CVE-2020-0381 Public exploit
In Parse_wave of eas_mdls.c, there is a possible out of bounds write due to an integer overflow. This could lead to rem…
-
Unscored —CVE-2020-0380 Public exploit
In allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect bounds check. This could …
-
Unscored —
Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Info…
-
Unscored —CVE-2020-13259 Public exploit
A vulnerability in the web-based management interface of RAD SecFlow-1v os-image SF_0290_2.3.01.26 could allow an unaut…