CVE-2020-12659 affecting package kernel 5.4.91-6

CVE-2020-12659 affecting package kernel 5.4.91-6. A patched version of the package is available...

Tenable SecurityCenter < 5.14.0 Multiple Vulnerabilities (TNS-2020-02)

According to its self-reported version, the Tenable SecurityCenter application installed on the remote host is earlier than 5.14.0. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues nor the stand-alone patch but has instead relied only on the...

SonicWall Secure Mobile Access Remote Code Execution (SNWLID-2021-0001)

According to its self-reported version, the remote SonicWall Secure Mobile Access is affected by a remote code execution vulnerability. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands. Note that Nessus has not tested for these issues bu...

PT-2021-16511 · Belkin · Belkin Linksys Wrt160Nl

Name of the Vulnerable Software and Affected Versions: Belkin Linksys WRT160NL version 1.0.04.002 US 20130619 Description: The administration web interface on Belkin Linksys WRT160NL devices allows remote authenticated attackers to execute system commands with root privileges via shell...

CVE-2020-15437 affecting package kernel 5.4.91-6

CVE-2020-15437 affecting package kernel 5.4.91-6. A patched version of the package is available...

CVE-2020-35494 affecting package binutils 2.32-5

CVE-2020-35494 affecting package binutils 2.32-5. A patched version of the package is available...

PT-2021-14791 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle version 3.10 Description: A command execution vulnerability exists in the default legacy spellchecker plugin. This issue can be exploited through a specially crafted series of HTTP requests, leading to command execution. An attacker mu...

PT-2021-1692 · Cisco · Cisco Small Business Rv130W +3

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers affected versions not specified Description: The issue is related to multiple vulnerabilities in the web-based management interface of the affected routers. These vulnerabilities...

PT-2021-7592 · Cgal +1 · Cgal +1

Name of the Vulnerable Software and Affected Versions: CGAL libcgal version 5.1.1 Description: The issue is related to the Nef polygon-parsing functionality and involves an out-of-bounds read and type confusion, potentially leading to code execution. This can be triggered by a specially crafted...

PT-2020-17295 · WordPress · Secure-File-Manager

Name of the Vulnerable Software and Affected Versions: Secure-file-manager plugin versions through 2.5 for WordPress Description: The issue arises from the secure-file-manager plugin loading elFinder code without proper access control, allowing any authenticated user to run the elFinder upload...

CVE-2020-14364 affecting package qemu-kvm 4.2.0-48

CVE-2020-14364 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

PT-2020-4762 · Microsoft · Raw Image Extension

Name of the Vulnerable Software and Affected Versions: Raw Image Extension affected versions not specified Description: The issue is related to a buffer overflow in the Raw Image Extension plugin. This could allow a remote attacker to execute arbitrary code. Recommendations: At the moment, there ...

PT-2020-4879 · Microsoft · Windows Ntfs +1

Name of the Vulnerable Software and Affected Versions: Windows Network File System NFS affected versions not specified Description: The issue is related to a buffer overflow in the Network File System NFS of Windows operating systems. This can be exploited to gain unauthorized access to protected...

CVE-2020-11102 affecting package qemu-kvm 4.2.0-48

CVE-2020-11102 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

PT-2020-8642 · Unknown · Juuko K-808

Name of the Vulnerable Software and Affected Versions: JUUKO K-808 versions prior to numbers ending ...9A, ...9B, ...9C, etc. Description: The issue allows remote attackers to execute commands on vulnerable installations of the equipment. No authentication is required to exploit this issue. The...

PT-2020-16458 · Acme +1 · Mini Httpd +1

Name of the Vulnerable Software and Affected Versions: Belkin LINKSYS WRT160NL version 1.0.04.002 US 20130619 Description: The issue is a stack-based buffer overflow due to the use of sprintf in the create dir function of mini httpd. This can lead to arbitrary code execution if successfully...

CVE-2017-17522 affecting package python2 2.7.18-14

CVE-2017-17522 affecting package python2 2.7.18-14. A patched version of the package is available...

CVE-2020-8623 affecting package bind 9.16.3-3

CVE-2020-8623 affecting package bind 9.16.3-3. A patched version of the package is available...

CVE-2014-9636 affecting package unzip 6.0-19

CVE-2014-9636 affecting package unzip 6.0-19. A patched version of the package is available...

CVE-2014-8141 affecting package unzip 6.0-19

CVE-2014-8141 affecting package unzip 6.0-19. A patched version of the package is available...