Archive
12 November 2020
Vulnerabilities first published on this day (UTC), newest first.
159 results · Feed
-
Medium 6.3
Avaya Equinox Conferencing XSS
A Cross Site Scripting (XSS) Vulnerability on the Unified Portal Client (web client) used in Avaya Equinox Conferencing can allow an authenticated user to perform XSS attacks. The affected versions of Equinox Conferencing includes all 9.x versions before 9.1.…
-
Unscored —
Untangle Firewall NG before 16.0 uses MD5 for passwords.
-
Unscored —
Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack. Communication between Erlang nodes is done b…
-
Medium 6.1
Improper Neutralization of Input During Web Page Generation in CKEditor4
A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and paste crafted HTML code into one of editor inputs.
-
Unscored —
SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to remote code execution an…
-
Unscored —CVE-2020-28414 Public exploit
A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unaut…
-
High —
Prototype Pollution in json-logic-js
Versions of json-logic-js prior to 2.0.0 are vulnerable to Prototype Pollution. The method operation allows a malicious user to modify the prototype of Object through the method property name. This causes modification of any existing property that will exist …
-
Unscored —CVE-2020-28415 Public exploit
A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unaut…
-
Unscored —
An unrestricted file-upload issue in EditLaunchPadDialog.aspx in Ivanti Endpoint Manager 2019.1 and 2020.1 allows an au…
-
High 7.5
A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All ve…
-
Unscored —
A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may allow any authenticated us…
-
Unscored —
A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Ru…
-
Unscored —
The Trusted Platform Modules (TPM) reference software may not properly track the number of times a failed shutdown happ…
-
Unscored —
Incorrect default permissions in the Intel(R) DSA before version 20.8.30.6 may allow an authenticated user to potential…
-
Unscored —
Incorrect default permissions in the Intel(R) Board ID Tool version v.1.01 may allow an authenticated user to potential…
-
Unscored —
Improper Restriction of XML External Entity Reference in subsystem forIntel(R) Quartus(R) Prime Pro Edition before vers…
-
Unscored —
Improper input validation in the firmware for Intel(R) Server Board S2600ST and S2600WF families may allow a privileged…
-
Unscored —
Improper permissions in the installer for the Intel(R) Battery Life Diagnostic Tool before version 1.0.7 may allow an a…
-
Unscored —
Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated u…
-
Unscored —
Improper permissions in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user t…
-
Unscored —
Improper permissions in the installer for the Intel(R) Data Center Manager Console before version 3.6.2 may allow an au…
-
Unscored —
Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated u…
-
Unscored —
Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated u…
-
Unscored —
Improper access control in the Intel(R) XTU before version 6.5.1.360 may allow an authenticated user to potentially ena…
-
Unscored —
Out of bounds read in the Intel CSI2 Host Controller driver may allow an authenticated user to potentially enable infor…
-
Unscored —
In Arm software implementing the Armv8-M processors (all versions), the stack selection mechanism could be influenced b…
-
Unscored —
In Sentrifugo 3.2, users can upload an image under "Assets -> Add" tab. This "Upload Images" functionality is suffered …
-
Unscored —
In Sentrifugo 3.2, users can share an announcement under "Organization -> Announcements" tab. Also, in this page, users…
-
Unscored —
In Sentrifugo 3.2, admin can edit employee's informations via this endpoint --> /sentrifugo/index.php/empadditionaldeta…
-
Unscored —
Uncontrolled search path in the Intel(R) VTune(TM) Profiler before version 2020 Update 1 may allow an authenticated use…
-
Unscored —
Improper initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an authen…
-
Unscored —
Insecure default variable initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 ma…
-
Unscored —
Protection mechanism failure in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow a pr…
-
Unscored —
Incorrect Access Control in the FileEditor (/Admin/Views/FileEditor/) in FlexDotnetCMS before v1.5.11 allows an authent…
-
Unscored —
Protection mechanism failure in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an a…
-
Unscored —
Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an a…
-
Unscored —
Improper permissions in the installer for the Intel(R) HID Event Filter Driver, all versions, may allow an authenticate…
-
Unscored —
Insufficiently protected credentials in the Intel(R) QAT for Linux before version 1.7.l.4.10.0 may allow an authenticat…
-
Unscored —
Improper permissions in the installer for the Intel(R) Processor Identification Utility before version 6.4.0603 may all…
-
Unscored —
Improper access controls in Intel Unite(R) Cloud Service client before version 4.2.12212 may allow an authenticated use…