Archive
28 October 2020
Vulnerabilities first published on this day (UTC), newest first.
59 results · Feed
-
High 7.5
SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/setti…
-
Unscored —
CyberArk Privileged Session Manager (PSM) 10.9.0.15 allows attackers to discover internal pathnames by reading an error…
-
Unscored —
Gophish before 0.11.0 allows the creation of CSV sheets that contain malicious content.
-
Unscored —
Gophish through 0.10.1 does not invalidate the gophish cookie upon logout.
-
Unscored —
The Reset button on the Account Settings page in Gophish before 0.11.0 allows attackers to cause a denial of service vi…
-
Medium 5.3
Gophish vulnerable to Server-Side Request Forgery
Gophish before 0.11.0 allows SSRF attacks.
-
Unscored —
Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the IMAP Host field on the account settings page.
-
Unscored —
Cross Site Scripting (XSS) vulnerability in Gophish through 0.10.1 via a crafted landing page or email template.
-
Unscored —
Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the Host field on the send profile form.
-
Unscored —
An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote…
-
Unscored —
The God Kings application 0.60.1 for Android exposes a broadcast receiver to other apps called com.innogames.core.front…
-
Unscored —
Genexis Platinum-4410 P4410-V2-1.28 devices allow stored XSS in the WLAN SSID parameter. This could allow an attacker t…
-
Unscored —
A Weak Session Management vulnerability in Citadel WebCit through 926 allows unauthenticated remote attackers to hijack…
-
Unscored —
An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows authenticated remote attackers t…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Citadel WebCit through 926 allow remote attackers to inject arbi…
-
Unscored —
Citadel WebCit through 926 allows unauthenticated remote attackers to enumerate valid users within the platform. NOTE: …
-
Medium 6.1
If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has a…
KEV May 24, 2022 -
High 8.0
If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has a…
KEV May 24, 2022 -
Critical 9.8
If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has alr…
KEV May 24, 2022 -
Unscored —
Sectona Spectra before 3.4.0 has a vulnerable SOAP API endpoint that leaks sensitive information about the configured a…
-
Unscored —
Winston 1.5.4 devices have an SSH user account with access from bastion hosts. This is undocumented in device documents…
-
Unscored —
Winston 1.5.4 devices make use of a Monit service (not managed during the normal user process) which is configured with…
-
Unscored —
Winston 1.5.4 devices do not enforce authorization. This is exploitable from the intranet, and can be combined with oth…
-
Unscored —
Winston 1.5.4 devices have a CORS configuration that trusts arbitrary origins. This allows requests to be made and view…
-
Unscored —
Winston 1.5.4 devices have a local www-data user that is overly permissioned, resulting in root privilege escalation.
-
Unscored —
Winston 1.5.4 devices allow a U-Boot interrupt, resulting in local root access.
-
Unscored —
The API on Winston 1.5.4 devices is vulnerable to CSRF.
-
Low —
CLI does not correctly implement strict mode
In the affected versions, the AWS Encryption CLI operated in "discovery mode" even when "strict mode" was specified. Although decryption only succeeded if the user had permission to decrypt with at least one of the CMKs, decryption could be successful using a…
-
Unscored —
Winston 1.5.4 devices are vulnerable to command injection via the API.
-
High 7.7
Unauthorized privilege escalation in Mod module
Red Discord Bot before version 3.4.1 has an unauthorized privilege escalation exploit in the Mod module. This exploit allows Discord users with a high privilege level within the guild to bypass hierarchy checks when the application is in a specific condition …
-
High 7.5
IBM Sterling Connect Direct for Microsoft Windows 4.7, 4.8, 6.0, and 6.1 could allow a remote attacker to cause a denia…
-
Medium 6.5
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the sy…
-
Unscored —
Shibboleth Identify Provider 3.x before 3.4.6 has a denial of service flaw. A remote unauthenticated attacker can cause…
-
Unscored —
NeoPost Mail Accounting Software Pro 5.0.6 allows php/Commun/FUS_SCM_BlockStart.php?code= XSS.
-
Unscored —
osCommerce Phoenix CE before 1.0.5.4 allows admin/define_language.php CSRF.
-
Unscored —CVE-2020-27976 Public exploit
osCommerce Phoenix CE before 1.0.5.4 allows OS command injection remotely. Within admin/mail.php, a from POST parameter…
-
Unscored —
The Snap7 server component in version 1.4.1, when an attacker sends a crafted packet with COTP protocol the last-data-u…
-
Medium 6.1
Grafana XSS via a query alias for the ElasticSearch datasource
Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource.
-
Unscored —
A vulnerability in the authenticated user web interface of Pulse Connect Secure < 9.1R9 could allow attackers to conduc…
-
Unscored —
A vulnerability in the Pulse Connect Secure / Pulse Policy Secure below 9.1R9 could allow attackers to conduct Cross-Si…