3828 matches found
Authentication flaw
Smarter Coffee Maker before 2nd generation allows firmware replacement without authentication or authorization. User interaction is required to press a button. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2020-15501
The CVE-2020-15501 entry applies to the Smarter Coffee Maker before the 2nd generation. The vulnerability allows firmware replacement without authentication or authorization; user interaction is required (pressing a button). The issue affects products that are no longer supported by the maintaine...
CVE-2020-15501: Undefined Security Weakness
Smarter Coffee Maker before 2nd generation allows firmware replacement without authentication or authorization. User interaction is required to press a button. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
PT-2020-14463 · Smarter · Smarter Coffee Maker
Name of the Vulnerable Software and Affected Versions: Smarter Coffee Maker versions before 2nd generation Description: The issue allows firmware replacement without authentication or authorization. User interaction is required to press a button. This problem only affects products that are no...
CVE-2020-7738
All versions of package shiba are vulnerable to Arbitrary Code Execution due to the default usage of the function load of the package js-yaml instead of its secure replacement , safeLoad...
CVE-2020-7738
All versions of package shiba are vulnerable to Arbitrary Code Execution due to the default usage of the function load of the package js-yaml instead of its secure replacement , safeLoad...
ActFax Privilege Control Vulnerability
ActFax is a fax server software of Austria ActiveFax, ActiveFax can make your computer into a virtual fax machine, realize the transmission of fax and Email in Windows and UNIX applications at will, suitable for all sizes of network and stand-alone use. A security vulnerability exists in ActFax...
CVE-2020-15843
ActFax Version 7.10 Build 0335 2020-05-25 is susceptible to a privilege escalation vulnerability due to insecure folder permissions on %PROGRAMFILES%\ActiveFax\Client, %PROGRAMFILES%\ActiveFax\Install\ and %PROGRAMFILES%\ActiveFax\Terminal. The folder permissions allow "Full Control" to...
CVE-2020-15843
ActFax Version 7.10 Build 0335 2020-05-25 is susceptible to a privilege escalation vulnerability due to insecure folder permissions on %PROGRAMFILES%\ActiveFax\Client, %PROGRAMFILES%\ActiveFax\Install\ and %PROGRAMFILES%\ActiveFax\Terminal. The folder permissions allow "Full Control" to...
Privilege escalation
ActFax Version 7.10 Build 0335 2020-05-25 is susceptible to a privilege escalation vulnerability due to insecure folder permissions on %PROGRAMFILES%\ActiveFax\Client, %PROGRAMFILES%\ActiveFax\Install\ and %PROGRAMFILES%\ActiveFax\Terminal. The folder permissions allow "Full Control" to...
CVE-2020-15843
ActFax Version 7.10 Build 0335 2020-05-25 is susceptible to a privilege escalation vulnerability due to insecure folder permissions on %PROGRAMFILES%\ActiveFax\Client, %PROGRAMFILES%\ActiveFax\Install\ and %PROGRAMFILES%\ActiveFax\Terminal. The folder permissions allow "Full Control" to...
PT-2020-14666
Name of the Vulnerable Software and Affected Versions ActFax version 7.10 Build 0335 Description The issue arises from insecure folder permissions on certain directories, allowing "Full Control" to "Everyone". This can be exploited by an authenticated local attacker to replace the TSClientB.exe...
PT-2020-19572
Name of the Vulnerable Software and Affected Versions AppSpider versions prior to 7.2.126 Description The issue arises when the AppSpider installer calls an executable that can be replaced by an attacker with access to the local machine, potentially allowing the execution of arbitrary code. This ...
CVE-2020-2278
Jenkins Storable Configs Plugin 1.0 and earlier does not restrict the user-specified file name, allowing attackers with Job/Configure permission to replace any other '.xml' file on the Jenkins controller with a job config.xml file's content...
CVE-2020-2278
Jenkins Storable Configs Plugin 1.0 and earlier does not restrict the user-specified file name, allowing attackers with Job/Configure permission to replace any other '.xml' file on the Jenkins controller with a job config.xml file's content...
PT-2020-15507 · Jenkins · Jenkins Storable Configs Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Storable Configs Plugin versions 1.0 and earlier Description: The issue allows attackers with Job/Configure permission to replace any other '.xml' file on the Jenkins controller with a job config.xml file's content, due to the lack of...
CVE-2020-2278: Improper Limitation of a Pathname to a Restricted Directory
Jenkins Storable Configs Plugin 1.0 and earlier does not restrict the user-specified file name, allowing attackers with Job/Configure permission to replace any other '.xml' file on the Jenkins controller with a job config.xml file's content...
PT-2020-19987 · Nextcloud +1 · Nextcloud Server +1
Name of the Vulnerable Software and Affected Versions: Nextcloud Server version 19.0.1 Description: The issue is related to insufficient protection of server-side encryption keys, allowing an attacker to replace the public key and potentially decrypt them later. This could lead to an elevation of...
PT-2020-14641
Name of the Vulnerable Software and Affected Versions Bluetooth versions 4.0 through 5.0 Description The issue concerns a man-in-the-middle attack, also known as BLURtooth, which affects devices supporting Bluetooth before version 5.1. This attack exploits the Cross Transport Key Derivation in...
