7003 matches found
CVE-2020-15505
A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2 and earlier, and 9.8.0; and Monitor and Reporting Database RDB version 2.0.0.1 and earlier that...
Adning Advertising < 1.5.6 - Unauthenticated Arbitrary File Upload/Deletion
The issue is being actively exploited, and could allow unauthorised attackers to upload/delete arbitrary files...
F5 BIG-IP Remote Code Execution Vulnerability (CVE-2020-5902)
Update July 10, 2020: F5 updated their mitigation section of security advisory on July 8, 2020 at 17:00 Pacific time, and provided a new mitigation mechanism to help customers mitigate currently known unauthenticated exploits. Qualys also updated QID 38791 to reflect these changes and are availab...
CVE-2020-23934
creationtimestamp| type| source ---|---|--- 2020-07-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48636...
FreeBSD : py-matrix-synapse -- multiple vulnerabilities (d9f686f3-fde0-48dc-ab0a-01c2fe3e0529)
Matrix developers report : Due to the two security issues highlighted below, server administrators are encouraged to update Synapse. We are not aware of these vulnerabilities being exploited in the wild. - A malicious homeserver could force Synapse to reset the state in a room to a small subset o...
Authorization
CyMiInstaller322 ActiveX which runs MIPLATFORM downloads files required to run applications. A vulnerability in downloading files by CyMiInstaller322 ActiveX caused by an attacker to download randomly generated DLL files and MIPLATFORM to load those DLLs due to insufficient verification...
Curve: Sensitive Info Leak - An Attacker Can Retrieve All the Users Mobile Numbers at https://website-api.production.curve.app/api/waitlist/us
Hi, When am going through all the JS files in curve.com I found a link called "/usa" is used to create Curve USA Waitlists by entering your name, email address, mobile number and address details. F874173 Then there is a functionality called "Track my Position" by using which joined users can view...
Rockstar Games: SocialClub Account Take Over Through Import Friends feature
In this report, the researcher identified a vulnerability in a Social Club feature intended to allow users to import their friends list from Facebook and other social media sites. However, if a targeted victim were to visit a crafted site containing a specific malicious script that exploited this...
CVE-2020-11840
Unauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting unauthorized information disclosure...
Microsoft Windows Multiple Vulnerabilities (KB4561612)
This host is missing a critical security update according to Microsoft KB4561612 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4561608)
This host is missing a critical security update according to Microsoft KB4561608 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Windows Runtime Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could exploit this vulnerability by running a specially crafted...
Windows Print Configuration Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially...
macOS 10.15.x < 10.15.5 Supplemental Update / 10.13.x < 10.13.6 Security Update 2020-003
The remote host is running a version of macOS / Mac OS X that is 10.15.x prior to 10.15.5 Supplemental Update, 10.13.x prior to 10.13.6 Security Update 2020-003. It is, therefore, affected by a remote code execution vulnerability : - An application may be able to execute arbitrary code with kerne...
CVE-2020-13166
creationtimestamp| type| source ---|---|--- 2020-05-22 16:03:00+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/pleskmylittleadminviewstate.rb 2020-05-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48513 2022-12-09...
Dell EMC Isilon OneFS Security Feature Issue Vulnerability (CNVD-2020-31248)
Dell EMC Isilon OneFS is a horizontally scalable storage system for unstructured data from Dell USA. A security vulnerability exists in Dell EMC Isilon OneFS 8.2.2 and earlier versions. The vulnerability can be exploited by an attacker to compromise an affected system with the help of the...
CVE-2019-7192
creationtimestamp| type| source ---|---|--- 2020-05-20 14:15:03+00:00| exploited| https://t.me/SecLabNews/7629 2020-05-23 19:40:04+00:00| published-proof-of-concept| https://t.me/cKure/629 2020-05-25 13:10:20+00:00| published-proof-of-concept| Telegram/cTUTNxLsVbqKX6WOWINdC5vNap5JntgN7QaLpOvlkc1T...
CVE-2017-7391
creationtimestamp| type| source ---|---|--- 2020-05-19 08:35:02+00:00| exploited| https://t.me/SecLabNews/7612...
CVE-2020-11022
creationtimestamp| type| source ---|---|--- 2020-05-18 18:25:25+00:00| seen| https://t.me/canyoupwnme/6440 2021-09-21 06:42:48+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/169 2023-11-25 00:45:50+00:00| seen| Telegram/8ZL5qt-1oGojxv22dU4510g677lxSwyLpoTxQkV3Y42k0 2024-03-09...
CVE-2020-13125
An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13126. Unauthenticated attackers can create users with the Subscriber role even if registration is disabled...