| advancedsystemcare — advanced_systemcare |
There is a local denial of service vulnerability in Advanced SystemCare 13 PRO 13.5.0.174. Attackers can use a constructed program to cause a computer crash (BSOD) |
2020-12-03 |
4.9 |
CVE-2020-23738
MISC
MISC
MISC |
| advsys — pngout |
An issue was discovered in PNGOUT 2020-01-15. When compressing a crafted PNG file, it encounters an integer overflow. |
2020-11-30 |
4.3 |
CVE-2020-29384
MISC
MISC
MISC |
| amoisoft — anyview |
In AnyView (network police) network monitoring software 4.6.0.1, there is a local denial of service vulnerability in AnyView, attackers can use a constructed program to cause a computer crash (BSOD). |
2020-12-03 |
4.9 |
CVE-2020-23741
MISC
MISC
MISC |
| antiy — antiy_zhijia_terminal_defense_system |
There is a local denial of service vulnerability in the Antiy Zhijia Terminal Defense System 5.0.2.10121559 and an attacker can cause a computer crash (BSOD). |
2020-12-03 |
4.9 |
CVE-2020-23727
MISC
MISC
MISC |
| apache — httpclient |
Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution. |
2020-12-02 |
5 |
CVE-2020-13956
MISC
MLIST
MLIST |
| atlassian — jira |
Affected versions of Automation for Jira – Server allowed remote attackers to read and render files as mustache templates in files inside the WEB-INF/classes & <jira-installation>/jira/bin directories via a template injection vulnerability in Jira smart values using mustache partials. The affected versions are those before version 7.1.15. |
2020-11-30 |
5.5 |
CVE-2020-14193
N/A |
| atx — minicmts200a_firmware |
A Directory Traversal vulnerability exists in ATX miniCMTS200a Broadband Gateway through 2.0 and Pico CMTS through 2.0. Successful exploitation of this vulnerability would allow an unauthenticated attacker to retrieve administrator credentials by sending a malicious POST request. |
2020-12-01 |
5 |
CVE-2020-28993
MISC
MISC |
| bitrix24 — bitrix_framework |
An issue was discovered in Bitrix24 Bitrix Framework (1c site management) 20.0. An “User enumeration and Improper Restriction of Excessive Authentication Attempts” vulnerability exists in the admin login form, allowing a remote user to enumerate users in the administrator group. This also allows brute-force attacks on the passwords of users not in the administrator group. |
2020-12-02 |
4 |
CVE-2020-28206
MISC |
| br-automation — industrial_automation_aprol |
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to historical data from AprolSqlServer by bypassing authentication, a different vulnerability than CVE-2019-16358. |
2020-11-27 |
5 |
CVE-2019-19878
MISC |
| br-automation — industrial_automation_aprol |
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to sensitive information outside the working directory via Directory Traversal attacks against AprolSqlServer, a different vulnerability than CVE-2019-16357. |
2020-11-27 |
5 |
CVE-2019-19877
MISC |
| br-automation — industrial_automation_aprol |
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get information from the AprolSqlServer DBMS by bypassing authentication, a different vulnerability than CVE-2019-16356 and CVE-2019-9983. |
2020-11-27 |
5 |
CVE-2019-19873
MISC |
| br-automation — industrial_automation_aprol |
An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. PVs could be changed (unencrypted) by using the IosHttp service and the JSON interface. |
2020-11-27 |
5 |
CVE-2019-19869
MISC |
| canon — mf237w_firmware |
An issue was discovered on Canon MF237w 06.07 devices. An “Improper Handling of Length Parameter Inconsistency” issue in the IPv4/ICMPv4 component, when handling a packet sent by an unauthenticated network attacker, may expose Sensitive Information. |
2020-11-30 |
5 |
CVE-2020-16849
MISC
CONFIRM |
| canto — canto |
The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/get.php?subdomain=SSRF. |
2020-11-30 |
5 |
CVE-2020-28977
MISC
MISC
MISC
MISC
MISC |
| canto — canto |
The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/tree.php?subdomain=SSRF. |
2020-11-30 |
5 |
CVE-2020-28978
MISC
MISC
MISC
MISC
MISC |
| canto — canto |
The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external server via /includes/lib/detail.php?subdomain=SSRF. |
2020-11-30 |
5 |
CVE-2020-28976
MISC
MISC
MISC
MISC
MISC |
| clmg — clmg |
A flaw was found in CImg in versions prior to 2.9.3. Integer overflows leading to heap buffer overflows in load_pnm() can be triggered by a specially crafted input file processed by CImg, which can lead to an impact to application availability or data integrity. |
2020-12-03 |
5.8 |
CVE-2020-25693
MISC |
| coremail_xt_project — coremail_xt |
jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal signature, as demonstrated by a .jpg.html filename in the signImgFile parameter. |
2020-11-27 |
4.3 |
CVE-2020-29133
MISC |
| cpanel — cpanel |
In cPanel before 90.0.17, 2FA can be bypassed via a brute-force approach (SEC-575). |
2020-11-27 |
4 |
CVE-2020-29136
MISC
MISC |
| cpanel — cpanel |
cPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface (SEC-577). |
2020-11-27 |
4.3 |
CVE-2020-29137
MISC
MISC |
| ctolog — thinkadmin |
ThinkAdmin version v1 v6 has a stored XSS vulnerability which allows remote attackers to inject an arbitrary web script or HTML. |
2020-12-01 |
4.3 |
CVE-2020-29315
MISC |
| dadajiasu — dada_accelerator |
There is a local denial of service vulnerability in DaDa accelerator 5.6.19.816,, attackers can use constructed programs to cause computer crashes (BSOD). |
2020-12-03 |
4.9 |
CVE-2020-23736
MISC
MISC
MISC |
| desknets — neo |
Cross-site scripting vulnerability in desknet’s NEO (desknet’s NEO Small License V5.5 R1.5 and earlier, and desknet’s NEO Enterprise License V5.5 R1.5 and earlier) allows remote attackers to inject arbitrary script via unspecified vectors. |
2020-12-03 |
4.3 |
CVE-2020-5638
MISC
MISC |
| dlt-daemon_project — dlt-daemon |
A buffer overflow in the dlt_filter_load function in dlt_common.c in dlt-daemon 2.8.5 (GENIVI Diagnostic Log and Trace) allows arbitrary code execution because fscanf is misused (no limit on the number of characters to be read in a format argument). |
2020-11-30 |
6.8 |
CVE-2020-29394
MISC
MISC |
| drivergenius — drivergenius |
In DriverGenius 9.61.5480.28 there is a local privilege escalation vulnerability in the driver wizard, attackers can use constructed programs to increase user privileges. |
2020-12-03 |
4.6 |
CVE-2020-23740
MISC
MISC
MISC
MISC |
| ec-cube — ec-cube |
Improper restriction of rendered UI layers or frames in EC-CUBE versions from 3.0.0 to 3.0.18 leads to clickjacking attacks. If a user accesses a specially crafted page while logged into the administrative page, unintended operations may be conducted. |
2020-12-03 |
4.3 |
CVE-2020-5679
MISC
MISC |
| ec-cube — ec-cube |
Improper input validation vulnerability in EC-CUBE versions from 3.0.5 to 3.0.18 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vector. |
2020-12-03 |
5 |
CVE-2020-5680
MISC
MISC |
| eclipse — jetty |
In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacker can send a request with a body that is received entirely but not consumed by the application, then a subsequent request on the same connection will see that body prepended to its body. The attacker will not see any data but may inject data into the body of the subsequent request. |
2020-11-28 |
4.3 |
CVE-2020-27218
CONFIRM
CONFIRM
MLIST
MLIST
MLIST
MLIST
MLIST
MLIST
MLIST
MLIST
MLIST
MLIST
MLIST
MLIST |
| elastic — kibana |
The elasticsearch-operator does not validate the namespace where kibana logging resource is created and due to that it is possible to replace the original openshift-logging console link (kibana console) to different one, created based on the new CR for the new kibana resource. This could lead to an arbitrary URL redirection or the openshift-logging console link damage. This flaw affects elasticsearch-operator-container versions before 4.7. |
2020-12-02 |
5.8 |
CVE-2020-27816
MISC |
| hcltech — domino |
HCL Domino is susceptible to a lockout policy bypass vulnerability in the ID Vault service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the ID Vault service. |
2020-12-01 |
5 |
CVE-2020-4128
MISC |
| hcltech — hcl_domino |
HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the LDAP service. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP6 and 11.0.1 FP1 and later. |
2020-12-01 |
5 |
CVE-2020-4129
MISC |
| hcltech — hcl_domino |
HCL Domino is susceptible to a Login CSRF vulnerability. With a valid credential, an attacker could trick a user into accessing a system under another ID or use an intranet user’s system to access internal systems from the internet. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP6 and 11.0.1 FP1 and later. |
2020-11-30 |
4.3 |
CVE-2020-4127
MISC |
| hcltech — hcl_inotes |
HCL iNotes is susceptible to a sensitive cookie exposure vulnerability. This can allow an unauthenticated remote attacker to capture the cookie by intercepting its transmission within an http session. Fixes are available in HCL Domino and iNotes versions 10.0.1 FP6 and 11.0.1 FP2 and later. |
2020-12-01 |
4.3 |
CVE-2020-4126
MISC |
| hibernate — hibernate_orm |
A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity. |
2020-12-02 |
5.8 |
CVE-2020-25638
MISC |
| huawei — fusioncompute |
Huawei FusionCompute versions 6.5.1 and 8.0.0 have a command injection vulnerability. An authenticated, remote attacker can craft specific request to exploit this vulnerability. Due to insufficient verification, this could be exploited to cause the attackers to obtain higher privilege. |
2020-12-01 |
6.5 |
CVE-2020-9116
MISC |
| huawei — nova_4_firmware |
HUAWEI nova 4 versions earlier than 10.0.0.165(C01E34R2P4) and SydneyM-AL00 versions earlier than 10.0.0.165(C00E66R1P5) have an out-of-bounds read and write vulnerability. An attacker with specific permissions crafts malformed packet with specific parameter and sends the packet to the affected products. Due to insufficient validation of packet, which may be exploited to cause the information leakage or arbitrary code execution. |
2020-12-01 |
4.6 |
CVE-2020-9117
MISC |
| ibm — cloud_pak_for_security |
IBM Cloud Pak for Security 1.3.0.1(CP4S) does not invalidate session after logout which could allow an authenticated user to obtain sensitive information from the previous session. IBM X-Force ID: 186789. |
2020-11-30 |
4 |
CVE-2020-4696
XF
CONFIRM |
| ibm — cloud_pak_for_security |
IBM Cloud Pak for Security 1.3.0.1 (CP4S) could reveal sensitive information about the internal network to an authenticated user using a specially crafted HTTP request. IBM X-Force ID: 185362. |
2020-11-30 |
4 |
CVE-2020-4626
XF
CONFIRM |
| ibm — cloud_pak_for_security |
IBM Cloud Pak for Security 1.3.0.1 (CP4S) uses weaker than expected cryptographic algorithms during negotiation could allow an attacker to decrypt sensitive information. |
2020-11-30 |
5 |
CVE-2020-4624
XF
CONFIRM |
| ibm — cloud_pak_for_security |
IBM Cloud Pak for Security 1.3.0.1(CP4S) could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. |
2020-11-30 |
5 |
CVE-2020-4625
XF
CONFIRM |
| jenkins — shelve_project |
A cross-site request forgery (CSRF) vulnerability in Jenkins Shelve Project Plugin 3.0 and earlier allows attackers to shelve, unshelve, or delete a project. |
2020-12-03 |
5.8 |
CVE-2020-2321
MLIST
CONFIRM |
| lenovo — pcmanager |
A privilege escalation vulnerability was reported in Lenovo PCManager prior to version 3.0.50.9162 that could allow an authenticated user to execute code with elevated privileges. |
2020-11-30 |
4.6 |
CVE-2020-8351
CONFIRM |
| libvncserver_project — libvncserver |
A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception, resulting in a denial of service. |
2020-11-27 |
5 |
CVE-2020-25708
MISC |
| libxls_project — libxls |
An exploitable Out-of-bounds Write vulnerability exists in the xls_addCell function of libxls 2.0. A specially crafted xls file can cause a memory corruption resulting in remote code execution. An attacker can send malicious xls file to trigger this vulnerability. |
2020-12-02 |
6.8 |
CVE-2017-2910
MISC |
| linux — linux_kernel |
An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1. |
2020-11-28 |
6.9 |
CVE-2020-29368
MISC
MISC
MISC |
| linux — linux_kernel |
An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions (expand_downwards and expand_upwards) and page-table free operations from an munmap call, aka CID-246c320a8cfe. |
2020-11-28 |
6.9 |
CVE-2020-29369
MISC
MISC
MISC |
| linux — linux_kernel |
An issue was discovered in do_madvise in mm/madvise.c in the Linux kernel before 5.6.8. There is a race condition between coredump operations and the IORING_OP_MADVISE implementation, aka CID-bc0c4d1e176e. |
2020-11-28 |
4.7 |
CVE-2020-29372
MISC
MISC
MISC |
| linux — linux_kernel |
An issue was discovered in kmem_cache_alloc_bulk in mm/slub.c in the Linux kernel before 5.5.11. The slowpath lacks the required TID increment, aka CID-fd4d9c7d0c71. |
2020-11-28 |
4.4 |
CVE-2020-29370
MISC
MISC
MISC |
| linux — linux_kernel |
An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/huge_memory.c. The get_user_pages (aka gup) implementation, when used for a copy-on-write page, does not properly consider the semantics of read operations and therefore can grant unintended write access, aka CID-17839856fd58. |
2020-11-28 |
6.9 |
CVE-2020-29374
MISC
MISC
MISC |
| lxml — lxml |
A XSS vulnerability was discovered in python-lxml’s clean module. The module’s parser didn’t properly imitate browsers, which caused different behaviors between the sanitizer and the user’s page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code. |
2020-12-03 |
4.3 |
CVE-2020-27783
MISC |
| moddable — moddable |
Invalid Memory Access in the fxProxyGetter function in moddable/xs/sources/xsProxy.c in Moddable SDK before OS200908 causes a denial of service (SEGV). |
2020-12-04 |
5 |
CVE-2020-25461
MISC
MISC |
| moddable — moddable |
Heap buffer overflow at moddable/xs/sources/xsDebug.c in Moddable SDK before before 20200903. The top stack frame is only partially initialized because the stack overflowed while creating the frame. This leads to a crash in the code sending the stack frame to the debugger. |
2020-12-04 |
5 |
CVE-2020-25464
MISC |
| moddable — moddable |
Null Pointer Dereference. in xObjectBindingFromExpression at moddable/xs/sources/xsSyntaxical.c:3419 in Moddable SDK before OS200908 causes a denial of service (SEGV). |
2020-12-04 |
5 |
CVE-2020-25465
MISC
MISC |
| moddable — moddable |
Invalid Memory Access in fxUTF8Decode at moddable/xs/sources/xsCommon.c:916 in Moddable SDK before OS200908 causes a denial of service (SEGV). |
2020-12-04 |
5 |
CVE-2020-25463
MISC
MISC |
| myeventon — eventon |
The EventON plugin through 3.0.5 for WordPress allows addons/?q= XSS via the search field. |
2020-11-30 |
4.3 |
CVE-2020-29395
MISC
MISC
MISC |
| nlnetlabs — unbound |
An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020:2414. Vulnerable versions of Unbound could still amplify an incoming query into a large number of queries directed to a target, even with a lower amplification ratio compared to versions of Unbound that shipped before the mentioned erratum. This issue is about the incomplete fix for CVE-2020-12662, and it does not affect upstream versions of Unbound. |
2020-11-27 |
5 |
CVE-2020-10772
MISC |
| nodejs — node.js |
Versions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a number is passed in the input stream (when using Node.js 4.x). |
2020-12-03 |
6.4 |
CVE-2018-21270
MISC
MISC
MISC |
| online_voting_system_project — online_voting_system |
Online Birth Certificate System Project V 1.0 is affected by cross-site scripting (XSS). This vulnerability can result in an attacker injecting the XSS payload in the User Registration section. When an admin visits the View Detail of Application section from the admin panel, the attacker can able to steal the cookie according to the crafted payload. |
2020-12-02 |
4.3 |
CVE-2020-29239
MISC |
| outsystems — outsystems |
An issue was discovered in the Upload Widget in OutSystems Platform 10 before 10.0.1019.0. An unauthenticated attacker can upload arbitrary files. In some cases, this attack may consume the available database space (Denial of Service), corrupt legitimate data if files are being processed asynchronously, or deny access to legitimate uploaded files. |
2020-11-30 |
6.4 |
CVE-2020-29441
MISC |
| papermerge — papermerge |
Multiple cross-site scripting (XSS) vulnerabilities in Papermerge before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the rename, tag, upload, or create folder function. The payload can be in a folder, a tag, or a document’s filename. If email consumption is configured in Papermerge, a malicious document can be sent by email and is automatically uploaded into the Papermerge web application. Therefore, no authentication is required to exploit XSS if email consumption is configured. Otherwise authentication is required. |
2020-12-02 |
4.3 |
CVE-2020-29456
MISC
MISC
MISC |
| pbootcms — pbootcms |
Cross-site request forgery (CSRF) in PbootCMS 1.3.2 allows attackers to change the password of a user. |
2020-11-30 |
4.3 |
CVE-2020-17901
MISC |
| phoenixcontact — btp_2043w_firmware |
Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unresponsive and not accurately update the display content (Denial of Service). |
2020-12-02 |
5 |
CVE-2020-12524
CONFIRM |
| pimcore — pimcore |
Pimcore is an open source digital experience platform. In Pimcore before version 6.8.5 it is possible to modify & create website settings without having the appropriate permissions. |
2020-12-03 |
4 |
CVE-2020-26246
MISC
CONFIRM |
| pixar — openusd |
An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file can trigger an arbitrary out of bounds memory access in SdfPath Type Index. This vulnerability could be used to bypass mitigations and aid further exploitation. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file. |
2020-12-02 |
4.3 |
CVE-2020-13498
MISC |
| pixar — openusd |
A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 parsing of compressed string tokens in binary USD files. A specially crafted malformed file can trigger a heap overflow which can result in out of bounds memory access which could lead to information disclosure. This vulnerability could be used to bypass mitigations and aid further exploitation. To trigger this vulnerability, victim needs to access an attacker-provided malformed file. |
2020-12-02 |
4.3 |
CVE-2020-13494
MISC |
| pixar — openusd |
An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file can trigger an arbitrary out of bounds memory access in TfToken Type Index. This vulnerability could be used to bypass mitigations and aid further exploitation. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file. |
2020-12-02 |
4.3 |
CVE-2020-13496
MISC |
| pixar — openusd |
An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file can trigger an arbitrary out of bounds memory access in String Type Index. This vulnerability could be used to bypass mitigations and aid further exploitation. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file. |
2020-12-02 |
4.3 |
CVE-2020-13497
MISC |
| pixar — openusd |
An out-of-bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 uses SPECS data from binary USD files. A specially crafted malformed file can trigger an out-of-bounds memory access and modification which results in memory corruption. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file. |
2020-12-03 |
4.3 |
CVE-2020-13524
MISC |
| pixar — openusd |
A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. A specially crafted USDC file format path jumps decompression heap overflow in a way path jumps are processed. To trigger this vulnerability, the victim needs to open an attacker-provided malformed file. |
2020-12-02 |
6.8 |
CVE-2020-13493
MISC |
| processmaker — processmaker |
The sort parameter in the download page /sysworkflow/en/neoclassic/reportTables/reportTables_Ajax is vulnerable to SQL injection in ProcessMaker 3.4.11. A specially crafted HTTP request can cause an SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. |
2020-12-03 |
6.5 |
CVE-2020-13525
MISC |
| qemu — qemu |
hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver. |
2020-11-30 |
6.4 |
CVE-2020-25624
MISC |
| quickheal — total_security |
Quick Heal Total Security before version 19.0 transmits quarantine and sysinfo files via clear text. |
2020-11-30 |
4.3 |
CVE-2020-27586
MISC |
| redhat — cloudforms |
This release fixes a Cross Site Request Forgery vulnerability was found in Red Hat CloudForms which forces end users to execute unwanted actions on a web application in which the user is currently authenticated. An attacker can make a forgery HTTP request to the server by crafting custom flash file which can force the user to perform state changing requests like provisioning VMs, running ansible playbooks and so forth. |
2020-12-02 |
6.8 |
CVE-2020-14369
MISC |
| sagemcom — f@st_3486_router_firmware |
Incorrect Access Control in the configuration backup path in SAGEMCOM F@ST3486 NET DOCSIS 3.0, software NET_4.109.0, allows remote unauthenticated users to download the router configuration file via the /backupsettings.conf URI, when any valid session is running. |
2020-11-27 |
5 |
CVE-2020-29138
MISC |
| saibo — cyber_game_accelerator |
In Saibo Cyber Game Accelerator 3.7.9 there is a local privilege escalation vulnerability. Attackers can use the constructed program to increase user privileges |
2020-12-03 |
4.6 |
CVE-2020-23735
MISC
MISC |
| samba — samba |
A flaw was found in samba’s DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, will be restarted after a short delay, but it is easy for an authenticated non administrative attacker to crash it again as soon as it returns. The Samba DNS server itself will continue to operate, but many RPC services will not. |
2020-12-02 |
4 |
CVE-2020-14383
MISC
MISC |
| samba — samba |
A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to gain access to certain file and directory information which otherwise would be unavailable to the attacker. |
2020-12-03 |
4 |
CVE-2020-14318
MISC
MISC |
| schedmd — slurm |
Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin. |
2020-11-27 |
6.8 |
CVE-2020-27745
MISC |
| schedmd — slurm |
Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized Actor because xauth for X11 magic cookies is affected by a race condition in a read operation on the /proc filesystem. |
2020-11-27 |
4.3 |
CVE-2020-27746
MISC |
| schneider-electric — ecostruxure_energy_expert |
A CWE-284: Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow a user the ability to perform actions via the web interface at a higher privilege level. |
2020-12-01 |
6.5 |
CVE-2020-7547
MISC |
| schneider-electric — ecostruxure_energy_expert |
A CWE-284:Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow for arbitrary code execution on the server when an authorized user access an affected webpage. |
2020-12-01 |
6.5 |
CVE-2020-7545
MISC |
| softwaremill — akka-http-session |
This affects the package com.softwaremill.akka-http-session:core_2.13 before 0.5.11; the package com.softwaremill.akka-http-session:core_2.12 before 0.5.11; the package com.softwaremill.akka-http-session:core_2.11 before 0.5.11. For older versions, endpoints protected by randomTokenCsrfProtection could be bypassed with an empty X-XSRF-TOKEN header and an empty XSRF-TOKEN cookie. |
2020-11-27 |
6.8 |
CVE-2020-7780
MISC
MISC
MISC
MISC
MISC
MISC |
| textpattern — textpattern |
Textpattern CMS 4.6.2 allows CSRF via the prefs subsystem. |
2020-12-02 |
6.8 |
CVE-2020-29458
MISC |
| trendmicro — apex_one |
An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version and build information. |
2020-12-01 |
5 |
CVE-2020-28576
MISC
MISC
MISC |
| trendmicro — apex_one |
An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal the total agents managed by the server. |
2020-12-01 |
5 |
CVE-2020-28573
MISC
MISC
MISC |
| trendmicro — apex_one |
An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal server hostname and db names. |
2020-12-01 |
5 |
CVE-2020-28577
MISC
MISC
MISC |
| trendmicro — apex_one |
An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal number of managed agents. |
2020-12-01 |
5 |
CVE-2020-28582
MISC
MISC
MISC |
| trendmicro — apex_one |
An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version, build and patch information. |
2020-12-01 |
5 |
CVE-2020-28583
MISC
MISC
MISC |
| trendmicro — serverprotect |
A heap-based buffer overflow privilege escalation vulnerability in Trend Micro ServerProtect for Linux 3.0 may allow an attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target in order to exploit this vulnerability. |
2020-12-01 |
4.6 |
CVE-2020-28575
MISC
MISC |
| umbraco — umbraco_cms |
Editors/LogViewerController.cs in Umbraco through 8.9.1 allows a user to visit a logviewer endpoint even if they lack Applications.Settings access. |
2020-12-02 |
4 |
CVE-2020-29454
MISC |
| vsolcn — v1600d_firmware |
An issue was discovered on V-SOL V1600D V2.03.69 OLT devices. The string K0LTdi@gnos312$ is compared to the password provided by the the remote attacker. If it matches, access is provided. |
2020-11-29 |
5 |
CVE-2020-29377
MISC |
| vsolcn — v1600d_firmware |
An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. TELNET is offered by default but SSH is not always available. An attacker can intercept passwords sent in cleartext and conduct a man-in-the-middle attack on the management of the appliance. |
2020-11-29 |
4.3 |
CVE-2020-29380
MISC |
| vsolcn — v1600d_firmware |
An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. An low-privileged (non-admin) attacker can use a hardcoded password (4ef9cea10b2362f15ba4558b1d5c081f) to create an admin user. |
2020-11-29 |
4 |
CVE-2020-29375
MISC |
| vsolcn — v1600d_firmware |
An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. There is an !j@l#y$z%x6x7q8c9z) password for the admin account to authenticate to the TELNET service. |
2020-11-29 |
5 |
CVE-2020-29376
MISC |
| we-con — plc_editor |
WECON PLC Editor Versions 1.3.8 and prior has a stack-based buffer overflow vulnerability has been identified that may allow arbitrary code execution. |
2020-12-01 |
6.8 |
CVE-2020-25177
MISC |
| we-con — plc_editor |
WECON PLC Editor Versions 1.3.8 and prior has a heap-based buffer overflow vulnerabilities have been identified that may allow arbitrary code execution. |
2020-12-01 |
6.8 |
CVE-2020-25181
MISC |
| weseek — growi |
Reflected cross-site scripting vulnerability in GROWI v4.0.0 and earlier allows remote attackers to inject arbitrary script via unspecified vectors. |
2020-12-03 |
4.3 |
CVE-2020-5677
MISC
MISC
MISC |
| weseek — growi |
Stored cross-site scripting vulnerability in GROWI v3.8.1 and earlier allows remote attackers to inject arbitrary script via unspecified vectors. |
2020-12-03 |
4.3 |
CVE-2020-5678
MISC
MISC
MISC |
| weseek — growi |
GROWI v4.1.3 and earlier allow remote attackers to obtain information which is not allowed to access via unspecified vectors. |
2020-12-03 |
5 |
CVE-2020-5676
MISC
MISC
MISC |
| wisecleaner — wise_care_365 |
There is a local denial of service vulnerability in Wise Care 365 5.5.4, attackers can cause computer crash (BSOD). |
2020-12-03 |
4.9 |
CVE-2020-23726
MISC
MISC
MISC
MISC |
Recent Comments