CVE-2020-1301

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 SMBv1 server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'...

CVE-2020-4019

The file editing functionality in the Atlassian Companion App before version 1.0.0 allows local attackers to have the app run a different executable in place of the app's cmd.exe via a untrusted search path vulnerability...

libreswan: DoS attack via malicious IKEv1 informational exchange message

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan. An unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash...

PYSEC-2020-54

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The list of roles provided for an OAuth1 access token is silently ignored. Thus, when an access token is used to request a keystone token, the keystone token contains every role assignment the creator had for the project. Th...

CVE-2020-3303

A vulnerability in the Internet Key Exchange version 1 IKEv1 feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper...

Heybbs 1.2 no***_de***.php file has SQL injection vulnerability

HEYBBS micro-community is a front-end based on bootstrap+jq+css, back-end php+mysql development of micro-community program. A SQL injection vulnerability exists in the Heybbs 1.2 node.php file, which can be exploited by an attacker to obtain sensitive information from the database...

DEBIAN-CVE-2020-11958

re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme...

Project Worlds Official Car Rental System Code Issue Vulnerability

Project Worlds Official Car Rental System is a PHP and MySQL based car rental system. A code issue exists in the upload section of the file manager page in Project Worlds Official Car Rental System version 1. The vulnerability can be exploited to run commands on the server via the addcars.php fil...

Project Worlds Official Car Rental System SQL Injection Vulnerability

Project Worlds Official Car Rental System is a PHP and MySQL based car rental system. A SQL injection vulnerability exists in Project Worlds Official Car Rental System version 1. The vulnerability can be exploited to dump a MySQL database and bypass the login authentication pop-up window...

USC iLab cereal buffer overflow vulnerability

USC iLab cereal is a C++ library for serialization. A security vulnerability exists in USC iLab cereal version 1.3.0 and earlier. An attacker can exploit the vulnerability to obtain sensitive information memory layout or private key...

CVE-2020-10939

Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escalation...

File upload vulnerability in freeCMS v1.5 (CNVD-2020-24733)

FreeCMS is an open source free CMS. FreeCMS v1.5 has a file upload vulnerability that can be exploited by an attacker to upload arbitrary files and gain control of the web server...

Directory Traversal Vulnerability in freeCMS v1.5

FreeCMS is an open source free CMS. freeCMS v1.5 suffers from a directory traversal vulnerability, which can be exploited by an attacker to obtain sensitive information on a website...

freeCMS v1.5 Arbitrary File Deletion Vulnerability

FreeCMS is a free CMS system. An arbitrary file deletion vulnerability exists in FreeCMS v1.5, which can be exploited by an attacker to cause an impact on the availability of the system...

CVE-2020-5559

Cross-site scripting vulnerability in WL-Enq 1.11 and 1.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Heybbs Micro Community v1.2 suffers from SQL injection vulnerability (CNVD-2020-23507)

HEYBBS micro-community is a front-end based on bootstrap+jq+css, back-end php+mysql development of micro-community program. Heybbs Micro Community v1.2 has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

PT-2020-2446 · Unknown · Control Center Server

Name of the Vulnerable Software and Affected Versions: Control Center Server CCS versions prior to V1.5.0 Description: A stored Cross-site Scripting XSS vulnerability has been identified in the web interface of the Control Center Server CCS. This issue is related to the lack of input data...

envoy: Response flooding for HTTP/1.1

A resource consumption vulnerability was found in the servicemesh-proxy in Envoy. An attacker could use pipelined requests to cause excessive amounts of memory to be used, possibly degrading or crashing the application...

The vulnerability of the NTLMv1 authentication component in Samba network communication tools allows a hacker to gain unauthorized access to confidential data.

The vulnerability of the NTLMv1 authentication component in Samba network interactions is related to incomplete protection of user registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information...

Open Network Operating System (ONOS) Code Unexpected Execution Vulnerability (CNVD-2020-14217)

Open Network Operating System ONOS is a carrier-grade SDN network operating system for service providers and enterprise backbones. A code unintended execution vulnerability exists in Open Network Operating System ONOS 1.14. The vulnerability stems from a host event listener in the access control...