Archive
2 October 2020
Vulnerabilities first published on this day (UTC), newest first.
73 results · Feed
-
Medium 5.9
Bitdefender ceva_emu.cvd module denial-of-service (VA-8766)
A vulnerability has been discovered in the ceva_emu.cvd module that results from a lack of proper validation of user-supplied data, which can result in a pointer that is fetched from uninitialized memory. This can lead to denial-of-service. This issue affects…
-
High 7.3
Prototype Pollution
All versions of package safetydance are vulnerable to Prototype Pollution via the set function.
-
High 7.3
Prototype Pollution
The package bmoor before 0.8.12 are vulnerable to Prototype Pollution via the set function.
-
Unscored —
SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter.
-
Unscored —
Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATH_INFO.
-
Unscored —
Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode.
-
Unscored —
openmediavault before 4.1.36 and 5.x before 5.5.12 allows authenticated PHP code injection attacks, via the sortfield P…
-
Unscored —
fdctrl_write_data in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer for the curre…
-
Unscored —
An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, …
-
Unscored —
An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, …
-
Unscored —
An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, …
-
Unscored —
An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to inse…
-
Unscored —CVE-2020-17382 Public exploit
The MSI AmbientLink MsIo64 driver 1.0.0.8 has a Buffer Overflow (0x80102040, 0x80102044, 0x80102050,and 0x80102054).
-
Unscored —CVE-2020-14294 Public exploit
An issue was discovered in Secudos Qiata FTA 1.70.19. The comment feature allows persistent XSS that is executed when r…
-
Unscored —CVE-2020-14293 Public exploit
conf_datetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands as root via shell metacharacte…
-
Unscored —CVE-2020-12127 Scanner template
An information disclosure vulnerability in the /cgi-bin/ExportAllSettings.sh endpoint of the WAVLINK WN530H4 M30H4.V503…
-
Unscored —
Multiple authentication bypass vulnerabilities in the /cgi-bin/ endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allo…
-
Unscored —
A remote buffer overflow vulnerability in the /cgi-bin/makeRequest.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.1904…
-
Unscored —
A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.…
-
Unscored —
CSRF vulnerabilities in the /cgi-bin/ directory of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to remotely…
-
Unscored —
REDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session Expiration because tokens are not invalidated upon a logou…
-
Unscored —
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is an Opt object use-after-free related to Fi…
-
Unscored —
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. If TslAlloc attempts to allocate thread local stora…
-
Unscored —
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is a NULL pointer dereference via a crafted P…
-
Unscored —
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. In a certain Shading calculation, the number of out…
-
Unscored —
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. It allows attackers to execute arbitrary code via a…
-
Unscored —
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. When there is a multiple interpretation error for /…
-
Unscored —
An issue was discovered in Foxit Reader and PhantomPDF before 4.1 on macOS. Because the Hardened Runtime protection mec…
-
Unscored —
CodeLathe FileCloud before 20.2.0.11915 allows username enumeration.
-
Medium 6.1
Froala WYSIWYG Editor XSS Vulnerability
Froala Editor before 3.2.2 allows XSS via pasted content.
-
Unscored —
Artifex MuPDF before 1.18.0 has a heap based buffer over-write when parsing JBIG2 files allowing attackers to cause a d…
-
Unscored —
Artica Pandora FMS before 743 allows unauthenticated attackers to conduct SQL injection attacks via the pandora_console…
-
Unscored —
The wpo365-login plugin before v11.7 for WordPress allows use of a symmetric algorithm to decrypt a JWT token. This lea…