Archive
November 2020
Vulnerabilities first published in this month (UTC), newest first.
1,262 results · Feed
-
Unscored —
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get information from the …
-
Unscored —
Incorrect Access Control in the configuration backup path in SAGEMCOM F@ST3486 NET DOCSIS 3.0, software NET_4.109.0, al…
-
Unscored —
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. The AprolLoader could be used to inject a…
-
Unscored —
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. PVs could be changed (unencrypted) by usi…
-
Unscored —
CyberArk Endpoint Privilege Manager (EPM) 11.1.0.173 allows attackers to bypass a Credential Theft protection mechanism…
-
Unscored —
In Ericsson BSCS iX R18 Billing & Rating iX R18, MX is a web base module in BSCS iX that is vulnerable to stored XSS vi…
-
Unscored —
In Ericsson BSCS iX R18 Billing & Rating iX R18, ADMX is a web base module in BSCS iX that is vulnerable to stored XSS …
-
Unscored —
In cPanel before 90.0.17, 2FA can be bypassed via a brute-force approach (SEC-575).
-
Unscored —
cPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface (SEC-577).
-
Unscored —
cPanel before 90.0.17 has multiple instances of URL parameter injection (SEC-567).
-
Unscored —
jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal signature, as demonstrated by a .jpg.html filenam…
-
Unscored —CVE-2020-12262 Scanner template
Intelbras TIP200 60.61.75.15, TIP200LITE 60.61.75.15, and TIP300 65.61.75.15 devices allow /cgi-bin/cgiServer.exx?page=…
-
Unscored —
ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even i…
-
Unscored —
Cloudera Data Engineering (CDE) before 1.1 was vulnerable to a CSRF attack.
-
Unscored —
An issue was discovered in BigBlueButton through 2.2.29. A brute-force attack may occur because an unlimited number of …
-
Unscored —
An issue was discovered in BigBlueButton through 2.2.29. When at attacker is able to view an account_activations/edit?t…
-
Unscored —
Intelbras TIP 200 60.61.75.15, TIP 200 LITE 60.61.75.15, and TIP 300 65.61.75.22 devices allow cgi-bin/cgiServer.exx?pa…
-
Unscored —
In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference (IDOR) vulnerability that allow…
-
Unscored —
In GLPI before 9.5.3, ajax/comments.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an att…
-
Unscored —
Zetetic SQLCipher 4.x before 4.4.1 has a use-after-free, related to sqlcipher_codec_pragma and sqlite3Strlen30 in sqlit…
-
High 7.3
Prototype Pollution
This affects the package systeminformation before 4.30.2. The attacker can overwrite the properties and functions of an object, which can lead to executing OS commands.
-
Medium 5.3
Regular Expression Denial of Service (ReDoS)
All versions of package djvalidator are vulnerable to Regular Expression Denial of Service (ReDoS) by sending crafted invalid emails - for example, --@------------------------------------------------------------------------------------------------------------…
-
Critical 9.8
XXE in petl
petl before 1.68, in some configurations, allows resolution of entities in an XML document.
-
Unscored —
A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a r…
-
Unscored —
A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior. This vulnerability could allow a r…
-
Unscored —
A flaw exists in the Ingress/Egress checks routine of FactoryTalk Linx Version 6.11 and prior. This vulnerability could…
-
Unscored —
A flaw was found in the spice-vdagentd daemon, where it did not properly handle client connections that can be establis…
-
Unscored —
A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections. This flaw…
-
Unscored —
A flaw was found in the SPICE file transfer protocol. File data from the host system can end up in full or in parts in …
-
Unscored —
slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even …
-
Unscored —
Affected versions of Atlassian Fisheye/Crucible allow remote attackers to achieve Regex Denial of Service via user-supp…
-
Unscored —
scan.c in x11vnc 0.9.16 uses IPC_CREAT|0777 in shmget calls, which allows access by actors other than the current user.
-
Unscored —
Affected versions of Atlassian Fisheye/Crucible allow remote attackers to impact the application's availability via a D…
-
Unscored —CVE-2020-29070 Public exploit
osCommerce 2.3.4.1 has XSS vulnerability via the authenticated user entering the XSS payload into the title section of …
-
High 7.7
Any GLPI CalDAV calendars is read-only for every authenticated user
GLPI stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.3, any authenticated user has read…
-
High 7.5
Memory leak in nanopb
Nanopb is a small code-size Protocol Buffers implementation. In Nanopb before versions 0.4.4 and 0.3.9.7, decoding specifically formed message can leak memory if dynamic allocation is enabled and an oneof field contains a static submessage that contains a dyn…
-
Unscored —
A flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system to the virtual machin…
-
Unscored —
An XSS issue was found in the Shares feature of LiquidFiles before 3.3.19. The issue arises from the insecure rendering…
-
Unscored —
A Cross-Site Script Inclusion vulnerability was found on LiquidFiles before 3.3.19. This client-side attack requires us…
-
Medium 5.3
Erroneous Proof of Work calculation in geth
Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. An ethash mining DAG generation flaw in Geth before version 1.9.24 could cause miners to erroneously calculate PoW in an upcoming epoch (estimated early January, 2021). Th…