Lucene search
+L

10415 matches found

WPVulnDB
WPVulnDB
added 2020/06/11 12:00 a.m.54 views

WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation

Description Props to Simon Scannell of RIPS Technologies for finding an issue where set-screen-option can be misused by plugins leading to privilege escalation...

6CVSS5.2AI score0.01414EPSS
SaveExploits0References3
Veracode
Veracode
added 2020/06/04 4:12 a.m.35 views

Prototype Pollution

kibana is vulnerable to prototype pollution. The vulnerability exists through the improper use of set function of lodash in multiple locations, allowing Object.prototype to be overwritten...

7.2CVSS3.2AI score0.02146EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2020/06/03 5:15 p.m.8 views

CVE-2019-20809

The price oracle in PriceOracle.sol in Compound Finance Compound Price Oracle 1.0 through 2.0 allows a price poster to set an invalid asset price via the setPrice function, and consequently violate the intended limits on price swings...

7.5CVSS7.1AI score0.00882EPSS
SaveExploits0References1
OSV
OSV
added 2020/05/27 12:46 a.m.15 views

MGASA-2020-0230 Updated nodejs-set-value packages fix security vulnerability

Updated nodejs-set-value package fixes security vulnerability: A vulnerability was found in NOdejs set-value, where set-value is vulnerable to prototype Pollution in versions lower than 3.0.1. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a...

9.8CVSS7.9AI score0.02475EPSS
SaveExploits1References3
Mageia
Mageia
added 2020/05/27 12:46 a.m.86 views

Updated nodejs-set-value packages fix security vulnerability

Updated nodejs-set-value package fixes security vulnerability: A vulnerability was found in NOdejs set-value, where set-value is vulnerable to prototype Pollution in versions lower than 3.0.1. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a...

9.8CVSS4.7AI score0.02475EPSS
SaveExploits1References2
CNVD
CNVD
added 2020/05/25 12:00 a.m.10 views

Buffer overflow vulnerability in multiple Tenda products (CNVD-2020-31409)

The Tenda AC9, among others, is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in httpd in several Tenda products. The vulnerability can be exploited to execute arbitrary code by sending the 'list' parameter to the /goform/SetNetControlList URL...

9.8CVSS8.3AI score0.02552EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/05/25 12:00 a.m.12 views

Buffer overflow vulnerability in multiple Tenda products (CNVD-2020-31397)

The Tenda AC9, among others, is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in httpd in several Tenda products. The vulnerability can be exploited to execute arbitrary code by sending the 'speeddir' parameter to the /goform/SetSpeedWan URL...

9.8CVSS8.3AI score0.02552EPSS
SaveExploits1References1
OSV
OSV
added 2020/05/22 5:15 p.m.11 views

CVE-2020-13391

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...

9.8CVSS8.1AI score0.02552EPSS
SaveExploits1References2
OSV
OSV
added 2020/05/22 5:15 p.m.12 views

CVE-2020-13394

An issue was discovered on Tenda AC6 V1.0 V15.03.05.19multiTD01, AC9 V1.0 V15.03.05.196318CN, AC9 V3.0 V15.03.06.42multi, AC15 V1.0 V15.03.05.19multiTD01, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the...

9.8CVSS6.6AI score0.02552EPSS
SaveExploits1References2
Hacker One
Hacker One
added 2020/05/19 7:17 p.m.19 views

Node.js third-party modules: [object-path-set] Prototype pollution

I would like to report a prototype pollution vulnerability in object-path-set module. It allows an attacker to inject properties on Object.prototype. Module module name: object-path-set version: 1.0.0 npm page: https://www.npmjs.com/package/object-path-set Module Description set values in...

1AI score
SaveExploits0
Hacker One
Hacker One
added 2020/05/18 7:58 p.m.77 views

Node.js third-party modules: [keyd] Prototype pollution

I would like to report a prototype pollution vulnerability in keyd module. It allows an attacker to inject properties on Object.prototype. Module module name: keyd version: 1.3.4 npm page: https://www.npmjs.com/package/keyd Module Description A small library for using and manipulating key paths i...

0.8AI score
SaveExploits0
OSV
OSV
added 2020/05/12 9:15 p.m.8 views

DEBIAN-CVE-2020-11058

In FreeRDP after 1.1 and before 2.0.0, a stream out-of-bounds seek in rdpreadfontcapabilityset could lead to a later out-of-bounds read. As a result, a manipulated client or server might force a disconnect due to an invalid data read. This has been fixed in 2.0.0...

2.2CVSS6.7AI score0.01612EPSS
SaveExploits0References1
OSV
OSV
added 2020/05/12 9:15 p.m.7 views

UBUNTU-CVE-2020-11058

In FreeRDP after 1.1 and before 2.0.0, a stream out-of-bounds seek in rdpreadfontcapabilityset could lead to a later out-of-bounds read. As a result, a manipulated client or server might force a disconnect due to an invalid data read. This has been fixed in 2.0.0...

2.2CVSS6.7AI score0.01612EPSS
SaveExploits0References6
OSV
OSV
added 2020/05/09 9:15 p.m.6 views

UBUNTU-CVE-2019-20795

iproute2 before 5.1.0 has a use-after-free in getnetnsidfromname in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors such as C library...

4.4CVSS7.1AI score0.00403EPSS
SaveExploits0References4
CNVD
CNVD
added 2020/05/09 12:00 a.m.10 views

GlobeCoin Digital Error Vulnerability

GlobeCoin GLB is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'transfertokensafterICO' function in GLB. An attacker can use this vulnerability to set the balance of any user...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2020/05/09 12:00 a.m.8 views

Rocket Coin Digital Error Vulnerability

Rocket Coin XRC is an Ether-based digital currency.An integer overflow vulnerability exists in the 'multiTransfer' function in XRC. An attacker can use this vulnerability to set the balance of any user...

7.2AI score
SaveExploits0
OSV
OSV
added 2020/05/05 5:15 p.m.7 views

CVE-2019-19514

Ayision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in basic repeater settings via an SSID...

5.4CVSS6.1AI score0.00557EPSS
SaveExploits1References1
OPENSUSE Linux
OPENSUSE Linux
added 2020/05/02 12:00 a.m.120 views

Security update for git (moderate)

openSUSE Security Update: Security update for git Announcement ID: openSUSE-SU-2020:0598-1 Rating: moderate References: 1063412 1095218 1095219 1110949 1112230 1114225 1132350 1149792 1156651 1158785 1158787 1158788 1158789 1158790 1158791 1158792 1158793 1158795 1167890 1168930 1169605 1169786...

9.8CVSS9.3AI score0.97356EPSS
SaveExploits24References23
ATTACKERKB
ATTACKERKB
added 2020/04/29 12:15 a.m.7 views

CVE-2020-7453

In FreeBSD 12.1-STABLE before r359021, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r359020, and 11.3-RELEASE before 11.3-RELEASE-p7, a missing null termination check in the jailset configuration option "osrelease" may return more bytes with a subsequent jailget system call allowing a...

6CVSS6.2AI score0.0034EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/04/29 12:00 a.m.11 views

The vulnerability in the collection of libraries and drivers for fast packet processing in dpdk, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the library and driver set for fast packet processing in dpdk is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted VRINGSETNUM messages...

7.8CVSS7.1AI score0.02815EPSS
SaveExploits0References12Affected Software6
Rows per page
Query Builder