CVE-2020-25043

The installer of Kaspersky VPN Secure Connection prior to 5.0 was vulnerable to arbitrary file deletion that could allow an attacker to delete any file in the system...

Command Injection in tomato

All versions of tomato are vulnerable to Command Injection. The /api/exec endpoint does not validate user input allowing attackers to run arbitrary commands in the system. Recommendation No fix is currently available. Consider using an alternative module until a fix is made available...

Anhui Hope Network Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2020-48244)

Anhui Hope Network Technology Co., Ltd. is an Internet basic product service provider mainly engaged in website construction, network promotion and network marketing. Anhui Hope Network Technology Co., Ltd. website building system has SQL injection vulnerability, attackers can use the vulnerabili...

Palo Alto Networks PAN-OS Input Validation Error Vulnerability (CNVD-2020-49272)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. An input validation error vulnerability exists in Palo Alto Networks PAN-OS. The vulnerability arises from a network system or product that does not properly validate incoming data. An...

Memory corruption

IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force I...

Memory corruption

IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force I...

CVE-2020-14344

A flaw was found in libX11. An integer overflow leading to a heap-buffer overflow occurs when setuid programs call XIM client functions while running with elevated privileges. The highest threat from this vulnerability are to data confidentiality and integrity as well as system vulnerability...

Sick Package Analytics Password Management Vulnerability

Sick Package Analytics is a system performance monitoring software for automatic identification systems from Sick. A security vulnerability exists in Sick Package Analytics V04.1.1 and prior versions, which originates from the program storing passwords in plaintext. An attacker could exploit the...

Shanghai Danfan Network Technology Co., Ltd. builds website system with SQL injection vulnerability (CNVD-2020-48959)

Huaxia chemical network was founded in 2000, is founded by Shanghai Danfan network technology limited company, for the chemical industry to provide supporting B2B e-commerce platform of professional website. Shanghai Danfan network science and technology limited company builds the station system...

CVE-2020-10610

In OSIsoft PI System multiple products and versions, a local attacker can modify a search path and plant a binary to exploit the affected PI System software to take control of the local computer at Windows system privilege level, resulting in unauthorized information disclosure, deletion, or...

Sophos VPN Web Panel 2020 Denial Of Service

Exploit Title: Sophos VPN Web Panel 2020 - Denial of Service Poc Date: 2020-06-17 Exploit Author: Berk KIRAS Vendor Homepage: https://www.sophos.com/ Version:2020 Web Panel Tested on: Apache Berk KIRAS PwC - Cyber Security Specialist Sophos VPN Web Portal Denial of Service Vulnerability System...

Shanghai Danfan Network Technology Co., Ltd. builds website system with SQL injection vulnerability (CNVD-2020-49081)

Huaxia chemical network was founded in 2000, is founded by Shanghai Danfan network technology limited company, for the chemical industry to provide supporting B2B e-commerce platform of professional website. Shanghai Danfan network science and technology limited company builds the station system...

Adobe Creative Cloud Desktop Application Backlink Vulnerability (NVD-C-2020-154995)

Adobe Creative Cloud Desktop Application is a suite of applications for managing applications and services in the Creative Cloud Membership Management Center from Adobe USA. The program supports synchronizing and sharing files, managing fonts, and accessing asset libraries for commercial...

CVE-2020-1350

creationtimestamp| type| source ---|---|--- 2020-07-14 05:00:00+00:00| seen| https://msrc.microsoft.com/blog/2020/07/july-2020-security-update-cve-2020-1350-vulnerability-in-windows-domain-name-system-dns-server/ 2020-07-14 18:51:05+00:00| published-proof-of-concept|...

The vulnerability of the automated information system “Web-Torghi KS” arises from the lack of measures taken to protect the structure of the web page. This allows attackers to read arbitrary messages within the AI system.

The vulnerability of the automated information system “Web-Torghi KS” is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to read arbitrary messages within the AI system remotely...

Palo Alto Networks PAN-OS OS Command Injection Vulnerability (CNVD-2021-22171)

PAN-OS is an operating system designed specifically for security and control of Palo Alto Networks firewalls, with extensive firewall, management and network features. An OS command injection vulnerability exists in the Palo Alto Networks PAN-OS management interface. An attacker could exploit thi...

CVE-2020-12016

Baxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14, ExactaMix EM1200 Versions 1.1, 1.2, 1.4, 1.5, Baxter ExactaMix EM 2400 Versions 1.10, 1.11, 1.13, 1.14 and ExactaMix EM1200 Versions 1.1, 1.2, 1.4 and 1.5 have hard-coded administrative account...

SQL Injection Vulnerability in Website Building System of Zibo Xu Ran Network Technology Co.

Zibo Xuran Web Technology Co., Ltd. is a high-end web design company that provides full branding services. There is a SQL injection vulnerability in the website system of Zibo Xuran Network Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

Information disclosure

IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 178181...

Limdu Operating System Command Injection Vulnerability

Limdu is a machine learning framework for Node.js by Erel Segal-Halevi Software Developers. An operating system command injection vulnerability exists in the 'trainBatch' function in versions of Limdu prior to 0.95. The vulnerability stems from a network system or product not properly filtering...