Archive
September 2020
Vulnerabilities first published in this month (UTC), newest first.
2,205 results · Feed
-
High 8.4
Reflected XSS leading to RCE in SoyCMS
SoyCMS 3.0.2 and earlier is affected by Reflected Cross-Site Scripting (XSS) which leads to Remote Code Execution (RCE) from a known vulnerability. This allows remote attackers to force the administrator to edit files once the adminsitrator loads a specially …
-
Unscored —CVE-2020-13260 Public exploit
A vulnerability in the web-based management interface of RAD SecFlow-1v through 2020-05-21 could allow an authenticated…
-
High 8.4
Cross-site Request Forgery leading to RCE in SOY CMS
The SOY Inquiry component of SOY CMS is affected by Cross-site Request Forgery (CSRF) and Remote Code Execution (RCE). The vulnerability affects versions 2.0.0.3 and earlier of SOY Inquiry. This allows remote attackers to force the administrator to edit files…
-
Unscored —
In Pixel's use of the Catpipe library, there is possible memory corruption due to a use after free. This could lead to …
-
Unscored —
In blk_mq_queue_tag_busy_iter of blk-mq-tag.c, there is a possible use after free due to improper locking. This could l…
-
Unscored —
In skb_to_mamac of networking.c, there is a possible out of bounds write due to an integer overflow. This could lead to…
-
Unscored —
In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to…
-
Unscored —
In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could …
-
Unscored —
In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after fre…
-
Unscored —
In CamX code, there is a possible use after free due to a race condition. This could lead to local escalation of privil…
-
High 8.1CVE-2020-24750 Public exploit
Unsafe Deserialization in jackson-databind
FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfiguration.
-
Unscored —
In the FPC TrustZone fingerprint App, there is a possible invalid command handler due to an exposed test feature. This …
-
Unscored —
In manifest files of the SmartSpace package, there is a possible tapjacking vector due to a missing permission check. T…
-
Unscored —
A memory corruption vulnerability in Objective Open CBOR Run-time (oocborrt) in versions before 2020-08-12 could allow …
-
Unscored —
Stored XSS (Cross-Site Scripting) exists in the SolarWinds Orion Platform before before 2020.2.1 on multiple forms and …
-
Unscored —
An issue was discovered in the DBI module before 1.643 for Perl. The hv_fetch() documentation requires checking for NUL…
-
Unscored —
ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php.
-
Critical 9.8
Heap Overflow in PyMiniRacer
A heap overflow in Sqreen PyMiniRacer (aka Python Mini Racer) before 0.3.0 allows remote attackers to potentially exploit heap corruption.
-
Unscored —
Lack of cryptographic signature verification in the Sqreen PHP agent daemon before 1.16.0 makes it easier for remote at…
-
Unscored —
A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell…
-
Unscored —
A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell…
-
Unscored —
The Reset Password add-on before 1.2.0 for Alfresco suffers from CMIS-SQL Injection, which allows a malicious user to i…
-
Unscored —
The Reset Password add-on before 1.2.0 for Alfresco has a broken algorithm (involving an increment) that allows a malic…
-
Unscored —CVE-2020-11700 Public exploit
An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter fname, used on the page certs-x…
-
Unscored —CVE-2020-11699 Public exploit
An issue was discovered in Titan SpamTitan 7.07. Improper validation of the parameter fname on the page certs-x.php wou…
-
Unscored —
An issue was discovered in Titan SpamTitan 7.07. Improper input sanitization of the parameter community on the page snm…
-
Unscored —CVE-2020-11804 Public exploit
An issue was discovered in Titan SpamTitan 7.07. Due to improper sanitization of the parameter quid, used in the page m…
-
Unscored —CVE-2020-11803 Public exploit
An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with t…
-
Unscored —
There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid I…
-
Unscored —
There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid I…
-
Unscored —CVE-2020-0391 Public exploit
In applyPolicy of PackageManagerService.java, there is possible arbitrary command execution as System due to an unenfor…
-
Unscored —
In the app zygote SE Policy, there is a possible permissions bypass. This could lead to local information disclosure wi…
-
Unscored —
In createSaveNotification of RecordingService.java, there is a possible permission bypass due to an unsafe PendingInten…
-
Unscored —
There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid I…
-
Unscored —
In createEmergencyLocationUserNotification of GnssVisibilityControl.java, there is a possible permissions bypass due to…
-
Unscored —
In onCreate of RequestPermissionActivity.java, there is a possible tapjacking vector due to an insecure default value. …
-
Unscored —CVE-2020-0394 Public exploit
In onCreate of BluetoothPairingDialog.java, there is a possible tapjacking vector due to an insecure default value. Thi…
-
Unscored —
In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead t…
-
Unscored —
In getNotificationBuilder of CarrierServiceStateTracker.java, there is a possible permission bypass due to an unsafe Pe…
-
Unscored —
In showNotification of EmergencyCallbackModeService.java, there is a possible permission bypass due to an unsafe Pendin…