CVE-2019-5591

CVE-2019-5591 in FortiOS is a default-configuration vulnerability that allows an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating an LDAP server, enabling man‑in‑the‑middle credential exposure. A PoC (GitHub: fortios-ldap-mitm-poc-CVE-2019-5591) demo...

CVE-2020-17463

Summary: CVE-2020-17463 affects Fuel CMS 1.4.7 and enables SQL Injection via the col parameter in /pages/items, /permissions/items, or /navigation/items. The underlying issue is a CWE-89-style vulnerable input handling that allows untrusted input to affect SQL queries. Impact in sources: high, in...

CVE-2020-16139

Cisco Unified IP Conference Station 7937G versions 1-4-4-0 through 1-4-5-7 are affected by a denial-of-service vulnerability that lets an attacker remotely restart the device by sending specially crafted packets. The issue is described across CVE-2020-16139 sources, including PT-2020-14771, which...

CVE-2020-17505

Artica Web Proxy 4.30.000000 is affected by CVE-2020-17505. AnAuthenticated attacker can inject commands via the service-cmds parameter in cyrus.php, with the injected commands executed as root through service_cmds_peform, yielding remote code execution. The issue is documented across multiple so...

CVE-2020-17506

CVE-2020-17506 affects Artica Web Proxy 4.30.00000000. The vulnerability is an SQL injection in the apikey parameter of fw.login.php that allows remote attackers to bypass privilege detection and gain web backend administrator privileges. Documents indicate this can lead to authentication bypass ...

CVE-2020-17496

Vulnerability: vBulletin 5.5.4–5.6.2 allows remote code execution via crafted subWidgets data in ajax/render/widget_tabbedcontainer_tab_panel requests. Root cause: an incomplete patch for CVE-2019-16759 left a logic bug in widget handling, enabling pre-auth code execution. Impact: remote PHP code...

CVE-2020-9490

CVE-2020-9490 affects Apache HTTP Server versions 2.4.20–2.4.43. A specially crafted value for the Cache-Digest header in an HTTP/2 request could cause a crash when the server subsequently attempts to HTTP/2 PUSH a resource. Mitigation for unpatched servers is to disable HTTP/2 PUSH via H2Push of...

CVE-2020-8218

Pulse Connect Secure

CVE-2020-4463

CVE-2020-4463 affects IBM Maximo Asset Management 7.6.0.1 and 7.6.0.2, enabling an XML External Entity (XXE) injection when processing XML data. A remote attacker could disclose sensitive information or cause memory resource consumption. IBM’s bulletin lists fixes for 7.6.x, with 7.6.1.2 (and lat...

CVE-2020-10924

CVE-2020-10924 affects NETGEAR R6700 routers (e.g., V1.0.4.84_10.0.58) where the UPnP daemon (/usr/sbin/upnpd) mishandles length validation of user-supplied data, leading to a stack-based buffer overflow and potential code execution as root. The vulnerability is exploitable by network-adjacent at...

CVE-2020-10923

The CVE-2020-10923 vulnerability affects NETGEAR R6700 routers (e.g., firmware around V1.0.4.84_10.0.58). A flaw in the UPnP daemon (LISTENING on TCP 5000) allows network-adjacent attackers to bypass authentication via crafted UPnP messages, potentially enabling root code execution when combined ...

CVE-2020-15408

Pulse Connect Secure (PCS) before 9.1R8 is affected by CVE-2020-15408. An authenticated attacker can access the admin page console via the end-user web interface due to a rewrite. This is documented in multiple sources (NVD/NIST entry and Pulse advisory SA44516). The issue’s impact is limited to ...

CVE-2020-12812

CVE-2020-12812 is an improper authentication flaw in Fortinet FortiOS SSL VPN that allows a user to log in without FortiToken MFA if the username’s case is changed. Affected FortiOS versions include 6.4.0, 6.2.0–6.2.3, 6.0.9 and earlier. Fortinet advisories FG-IR-19-283 and related Nessus entries...

CVE-2020-15920

CVE-2020-15920 affects Mida Solutions eFramework

CVE-2020-3452

CVE-2020-3452 affects Cisco ASA Software and Cisco Firepower Threat Defense (FTD) web services. The issue is due to improper input validation of URLs in HTTP requests, enabling unauthenticated, remote attackers to perform directory traversal and read files from the web services filesystem (enable...

CVE-2020-11978

Apache Airflow CVE-2020-11978 affects Airflow 1.10.10 and earlier in one of the shipped example DAGs, enabling remote command execution. The root cause is a command-injection vulnerability in the example DAGs, which could allow an authenticated user to run arbitrary commands as the user running t...

CVE-2020-8958

CVE-2020-8958 affects Guangzhou 1GE ONU V2801RW and V2804RGW devices (firmware 1.9.1-181203 through 2.9.0-181024). The flaw allows remote OS command execution via shell metacharacters in Boaform/admin/formPing Dest IP Address, caused by unvalidated input in that field. Public evidence links this ...

CVE-2020-14644

CVE-2020-14644 affects Oracle WebLogic Server (Core) with vulnerable versions 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. The flaw is a deserialization issue that, if exploited via IIOP/T3, allows an unauthenticated remote attacker to take over the WebLogic Server. Public sources confirm this is a rem...

CVE-2020-1350

CVE-2020-1350 (SIGRed) is a remote code execution vulnerability in Windows DNS Server caused by improper handling of requests, allowing an unauthenticated attacker to execute code with Local System privileges via DNS queries. Exploitation could be wormable, enabling propagation to other DNS serve...

CVE-2020-1147

CVE-2020-1147 affects the .NET Framework, SharePoint Server, and Visual Studio. The root cause is improper handling of XML input, specifically a failure to validate the source markup during deserialization, which can lead to remote code execution. The vulnerability is characterized by the ability...