703 matches found
CVE-2020-3545
A vulnerability in Cisco FXOS Software could allow an authenticated, local attacker with administrative credentials to cause a buffer overflow condition. The vulnerability is due to incorrect bounds checking of values that are parsed from a specific file. An attacker could exploit this...
CVE-2020-1495
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
PT-2020-3796 · Microsoft · Office Excel +1
Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: A remote code execution issue exists in Microsoft Excel software when it fails to properly handle objects in memory. An attacker who successfully exploits this issue could run...
CVE-2020-15064
DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name...
CVE-2020-15056
TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name...
Cisco SD-WAN Solution Privilege Permission and Access Control Issues Vulnerability (CNVD-2020-50563)
Cisco SD-WAN Solution is a set of network extension solutions from Cisco. A privilege-granting and access-control issue vulnerability exists in Cisco SD-WAN Solution versions prior to 18.3.0, which arises from the program failing to properly validate input. A local attacker could exploit this...
UBICOD Medivision Digital Signage 1.5.1 - Authorization Bypass
Title: UBICOD Medivision Digital Signage 1.5.1 - Authorization Bypass Date: 2020-07-23 Author: LiquidWorm Product web page: http://www.medivision.co.kr CVE: N/A Vendor: UBICOD Co., Ltd. | MEDIVISION INC. Product web page: http://www.medivision.co.kr Affected version: Firmware 1.5.1 2013.01.3...
UBICOD Medivision Digital Signage 1.5.1 Privilege Escalation
UBICOD Medivision Digital Signage 1.5.1 Privilege Escalation Through Authorization Bypass Vendor: UBICOD Co., Ltd. | MEDIVISION INC. Product web page: http://www.medivision.co.kr Affected version: Firmware 1.5.1 2013.01.3 Summary: Medivision is a service that provides everything from DID operatio...
CVE-2020-5586
Cross-site scripting vulnerability in Cybozu Garoon 4.10.3 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script via unspecified vectors...
Defending Exchange servers under attack
Securing Exchange servers is one of the most important things defenders can do to limit organizational exposure to attacks. Any threat or vulnerability impacting Exchange servers should be treated with the highest priority because these servers contain critical business data, as well as highly...
Unauthorized Access Vulnerability in Website Building System of Trinity Network Technology Co.
Trinity Network Technologies Ltd. is a website construction company, engaged in website construction and development, Internet marketing and promotion, WeChat client development of new technology enterprises, to provide a full set of customized solutions for business users. Trinity Network...
File Upload Vulnerability in CSZ CMS
CSZ CMS is an open source web application that allows to manage all the content and settings on a website. A file upload vulnerability exists in CSZ CMS, which can be exploited by an attacker to upload malicious files and gain administrative privileges on the server...
PYSEC-2020-53
An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. Any user authenticated within a limited scope trust/oauth/application credential can create an EC2 credential with an escalated permission, such as obtaining admin while the user is on a limited viewer role. This potentially...
Arbitrary Code Execution Vulnerability in WMCMS
WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS has an arbitrary code execution vulnerability that can be exploited by attackers to gain administrative privileges on the web server...
PT-2020-12658
Name of the Vulnerable Software and Affected Versions: Rank Math plugin versions 1.0.40.2 and earlier Description: The issue allows unauthenticated remote attackers to update arbitrary WordPress metadata. This includes the ability to escalate or revoke administrative privileges for existing users...
File Upload Vulnerability in Extreme CMS Backend
Extreme CMS is open source and free PHPCMS web content management system. There is a file upload vulnerability in the backend of Extreme CMS, which can be exploited by attackers to upload malicious files and gain administrative privileges on the server...
Command Execution Vulnerability in ykcms5
YKCMS5 is a film and television system specifically tailored for film and television collection. YKCMS5 has a command execution vulnerability that can be exploited by attackers to gain system administration privileges...
File Upload Vulnerability in Riptide RSR Series Routers
Riptide Networks, Inc. is a data communications solutions provider. A file upload vulnerability exists in Ruijie RSR20 series routers, which can be exploited by attackers to upload arbitrary files and gain server administrator privileges...
CVE-2019-19277
A vulnerability has been identified in SIPORT MP All versions 3.1.4. Vulnerable versions of the device allow the creation of special accounts "service users" with administrative privileges that could enable a remote authenticated attacker to perform actions that are not visible to other users of...