3183 matches found
CVE-2020-13413
An issue was discovered in Aviatrix Controller before 5.4.1204. There is a Observable Response Discrepancy from the API, which makes it easier to perform user enumeration via brute force...
Horde Groupware Webmail Cross-Site Scripting Vulnerability (CNVD-2020-33657)
Horde Groupware Webmail is a browser-based, enterprise-class communications suite from Horde, Inc. A cross-site scripting vulnerability exists in the image viewing feature in Horde Groupware Webmail Edition prior to 5.2.22, which can be exploited to gain access to a user's Webmail account via a...
Linux kernel code issue vulnerability (CNVD-2020-41796)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A code issue vulnerability exists in the SELinux subsystem in versions of Linux kernel prior to 5.7. A remote attacker could exploit this vulnerability to crash the...
Linux kernel denial of service vulnerability (CNVD-2020-28264)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the drivers/spi/spi-dw.c file in Linux kernel versions prior to 5.4.17. An attacker can exploit this vulnerability to cause a denial...
Command Execution Vulnerability in SIYUCMS 5.1
SIYUCMS is a content management system based on ThinkPHP5 + AdminLTE. SIYUCMS 5.1 suffers from a command execution vulnerability that can be exploited by an attacker to execute arbitrary commands and gain administrative privileges on the web server...
DEBIAN-CVE-2020-12464
usbsgcancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925...
CVE-2020-9294
An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a remote unauthenticated attacker to access the system as a legitimate user by requesting a password change via the user interface...
AirDisk Pro app cross-site scripting vulnerability (CNVD-2020-25589)
AirDisk Pro app is a mobile application for managing AirDisk Pro wireless storage devices. The program supports document viewing, PDF reading, music playback, image viewing, text editing and file management. A cross-site scripting vulnerability exists in version 5.5.3 of the AirDisk Pro app for...
Arbitrary file deletion vulnerability in Ridewind Multi-User PHP Statistics System V5.2 backend
Ride Multi-User PHP Statistics is a website traffic statistics system for web store statistics. Ridewind Multi-User PHP Statistics System V5.2 has an arbitrary file deletion vulnerability in the background, which can be exploited by attackers to delete files and cause system reinstallation...
Universal Password Bypass Vulnerability in Driving School Management System V5.0 of Beijing 1039 Technology Development Co.
Beijing 1039 Technology Development Co., Ltd. is a focus on driving school management system, driving school mobile office system, driving school management software, driving school enrollment program development, etc., for the driving school to provide a dead-end driving school management system...
CVE-2020-5737
Stored XSS in Tenable.Sc before 5.14.0 could allow an authenticated remote attacker to craft a request to execute arbitrary script code in a user's browser session. Updated input validation techniques have been implemented to correct this issue...
NETGEAR WAC505 and WAC510 Information Disclosure Vulnerability
Both the NETGEAR WAC505 and NETGEAR WAC510 are a wireless access point AP from NETGEAR. An information disclosure vulnerability exists in the NETGEAR WAC505 version prior to V5.6.8.3 and the WAC510 version prior to V5.6.8.3, which can be exploited by an attacker to obtain sensitive information...
Oracle Virtualization VM VirtualBox Unauthorized Operation Vulnerability
Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...
Unspecified Vulnerability in Ascensio System ONLYOFFICE Document Server
Ascensio System ONLYOFFICE Document Server is an online office collaboration suite from Ascensio System, Latvia. The product supports viewing and editing of text, spreadsheets and presentations, among others. A security vulnerability exists in Ascensio System ONLYOFFICE Document Server version...
Synergy Systems & Solutions HUSKY RTU 6049-E70 Code Issue Vulnerability
Synergy Systems & Solutions HUSKY RTU 6049-E70 is a Remote Terminal Unit RTU for data acquisition and control from Synergy Systems & Solutions, India. A code issue vulnerability exists in the Synergy Systems & Solutions HUSKY RTU 6049-E70 using firmware version 5.0 and earlier. An attacker could...
CVE-2020-4273
IBM Spectrum Scale 4.2 and 5.0 could allow a local unprivileged attacker with intimate knowledge of the enviornment to execute commands as root using specially crafted input. IBM X-Force ID: 175977...
phpMyAdmin Injection Vulnerability
phpMyAdmin is a free, web-based MySQL database management tool from the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. An injection vulnerability exists in phpMyAdmin version 5.0....
HuCart Enterprise Building System v5.7.7 has file upload vulnerability
HuCart is a PHP+Mysql based enterprise building system CMS that can run on various server platforms such as Linux and Windows. A file upload vulnerability exists in HuCart Enterprise CMS v5.7.7, which can be exploited by attackers to upload arbitrary files...