Эксплуатируемые и новые серьёзные CVE: декабрь 2019 г.

FreeSWITCH 1.6.10 through 1.10.1 has a default password in event_socket.conf.xml.

• Без аутентификации
• Зашитые учётные данные

freeswitch · freeswitch1 дек. 2019 г.

Anviz CrossChex access control management software 4.3.8.0 and 4.3.12 is vulnerable to a buffer overflow vulnerability.

• Без аутентификации
• Ошибки памяти

anviz · crosschex2 дек. 2019 г.

An exploitable code execution vulnerability exists in the processing of multi-part/form-data requests within the base GoAhead web server app

• Без аутентификации
• Ошибки памяти

embedthis · goahead3 дек. 2019 г.

A denial-of-service vulnerability exists in the processing of multi-part/form-data requests in the base GoAhead web server application in ve

• Без аутентификации
• Отказ в обслуживании

embedthis · goahead3 дек. 2019 г.

The XML content type entity deserializer in Apache Olingo versions 4.0.0 to 4.6.0 is not configured to deny the resolution of external entit

• Десериализация
• XXE

apache · olingo4 дек. 2019 г.

class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, om

• Без аутентификации
• Загрузка файлов

verot project · verot4 дек. 2019 г.

Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allow attackers to bypass authentication because the password for the today account

• Без аутентификации
• Обход аутентификации

fronius · datamanager box 2.0 firmware4 дек. 2019 г.

D-Link DAP-1860 devices before v1.04b03 Beta allow arbitrary remote code execution as root without authentication via shell metacharacters w

• RCE без входа
• Обход аутентификации
• Нарушение контроля доступа (IDOR)

dlink · dap-1860 firmware5 дек. 2019 г.

This improper access control vulnerability allows remote attackers to gain unauthorized access to the system.

• Без аутентификации
• Нарушение контроля доступа (IDOR)

qnap · photo station5 дек. 2019 г.

This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system.

• RCE без входа

qnap · qts5 дек. 2019 г.

This external control of file name or path vulnerability allows remote attackers to access or modify system files.

• Без аутентификации
• Обход пути

qnap · photo station5 дек. 2019 г.

This external control of file name or path vulnerability allows remote attackers to access or modify system files.

• Без аутентификации
• Обход пути

qnap · photo station5 дек. 2019 г.

The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin components of the Adm

• RCE
• Инъекция команд

strapi · strapi5 дек. 2019 г.

A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and exec

• RCE
• Загрузка файлов

apache · struts5 дек. 2019 г.

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue.

• Без аутентификации
• Ошибки памяти

openslp · openslp6 дек. 2019 г.

The username parameter of the TITool PrintMonitor solution during the login request is vulnerable to and/or time-based blind SQLi.

• Без аутентификации
• SQL-инъекция

titool · printmonitor6 дек. 2019 г.

rsaz_512_sqr overflow bug on x86_64

• Без аутентификации
• Ошибки памяти

openssl · openssl6 дек. 2019 г.

On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authenti

• RCE
• Инъекция команд

supermicro · x8sti-f bios8 дек. 2019 г.

SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.

• Без аутентификации
• Отказ в обслуживании

sqlite · sqlite9 дек. 2019 г.

Yachtcontrol through 2019-10-06: It's possible to perform direct Operating System commands as an unauthenticated user via the "/pages/system

• RCE без входа
• Инъекция команд

yachtcontrol · yachtcontrol10 дек. 2019 г.

A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a specially

• Без аутентификации
• XSS

microsoft · power bi report server10 дек. 2019 г.

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k

• Локальное повышение привилегий

microsoft · windows 10 150710 дек. 2019 г.

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory,

• RCE
• Ошибки памяти

microsoft · office10 дек. 2019 г.

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Win32k

• RCE без входа
• Ошибки памяти

microsoft · windows 1010 дек. 2019 г.

An information disclosure vulnerability exists in Windows Media Player when it fails to properly handle objects in memory, aka 'Windows Medi

• Без аутентификации
• Ошибки памяти

microsoft · windows 710 дек. 2019 г.

Tableau Server 10.3 through 2019.4 on Windows and Linux allows XSS via the embeddedAuthRedirect page.

• Без аутентификации
• XSS

tableau · tableau server11 дек. 2019 г.

Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function.

• RCE без входа
• Десериализация

telerik · ui for asp.net ajax11 дек. 2019 г.

Multiple SQL injection vulnerabilities in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.9rc1, and 2.1.x before 2.1.7.

• Без аутентификации
• SQL-инъекция

zabbix · zabbix11 дек. 2019 г.

OpenBSD through 6.6 allows local users to escalate to root because a check for LD_LIBRARY_PATH in setuid programs can be defeated by setting

• Локальное повышение привилегий

openbsd · openbsd11 дек. 2019 г.

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.

• Без аутентификации
• Отказ в обслуживании

snakeyaml project · snakeyaml11 дек. 2019 г.

An issue was discovered in Zoho ManageEngine EventLog Analyzer 10.0 SP1 before Build 12110.

zohocorp · manageengine eventlog analyzer13 дек. 2019 г.

A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1.

• RCE без входа
• XSS

maxum · rumpus16 дек. 2019 г.

Roxy Fileman 1.4.5 for .NET is vulnerable to path traversal.

• Без аутентификации
• Обход пути

roxyfileman · roxy fileman16 дек. 2019 г.

ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability.

• Без аутентификации
• Утечка информации

elog project · elog17 дек. 2019 г.

ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a NULL pointer dereference.

• Без аутентификации
• Ошибки памяти
• Отказ в обслуживании

elog project · elog17 дек. 2019 г.

Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources.

• Без аутентификации
• SQL-инъекция

sonicwall · sma 100 firmware17 дек. 2019 г.

On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field.

• XSS

dlink · dir-615 firmware18 дек. 2019 г.

An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices.

• Без аутентификации
• Ошибки памяти

trendnet · tew-651br firmware18 дек. 2019 г.

IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin

• RCE без входа

ibm · planning analytics18 дек. 2019 г.

In Tautulli 2.1.9, CSRF in the /shutdown URI allows an attacker to shut down the remote media server.

• Без аутентификации
• CSRF
• Отказ в обслуживании

tautulli · tautulli18 дек. 2019 г.

A memory corruption issue was addressed with improved input validation.

• Локальное повышение привилегий
• Ошибки памяти

apple · iphone os18 дек. 2019 г.

A memory corruption issue was addressed with improved input validation.

• RCE
• Локальное повышение привилегий
• Ошибки памяти

apple · iphone os18 дек. 2019 г.

A type confusion issue was addressed with improved memory handling.

• RCE без входа

apple · icloud18 дек. 2019 г.

This issue was addressed with improved checks.

• RCE
• Инъекция команд

apple · mac os x18 дек. 2019 г.

Multiple memory corruption issues were addressed with improved memory handling.

• RCE без входа
• Ошибки памяти

apple · icloud18 дек. 2019 г.

A use after free issue was addressed with improved memory management.

• Локальное повышение привилегий
• Ошибки памяти

apple · mac os x18 дек. 2019 г.

A race condition was addressed with additional validation.

• Локальное повышение привилегий
• Состояние гонки

apple · iphone os18 дек. 2019 г.

An input validation issue was addressed with improved memory handling.

• Локальное повышение привилегий
• Ошибки памяти

apple · icloud18 дек. 2019 г.

An input validation issue was addressed with improved input validation.

• Ошибки памяти

apple · icloud18 дек. 2019 г.

A memory corruption issue was addressed with improved input validation.

• RCE без входа
• SQL-инъекция

apple · icloud18 дек. 2019 г.

A memory corruption issue was addressed by removing the vulnerable code.

• Локальное повышение привилегий
• Ошибки памяти

apple · icloud18 дек. 2019 г.

A use after free issue was addressed with improved memory management.

• RCE
• Локальное повышение привилегий
• Ошибки памяти

apple · iphone os18 дек. 2019 г.

A use after free issue was addressed with improved memory management.

• RCE без входа
• Ошибки памяти

apple · iphone os18 дек. 2019 г.

An out-of-bounds read was addressed with improved input validation.

• Без аутентификации
• Ошибки памяти

apple · iphone os18 дек. 2019 г.

An out-of-bounds read was addressed with improved input validation.

• Без аутентификации
• Ошибки памяти

apple · iphone os18 дек. 2019 г.

A use after free issue was addressed with improved memory management.

• RCE без входа
• Ошибки памяти

apple · iphone os18 дек. 2019 г.

A memory corruption issue was addressed with improved input validation.

• RCE без входа
• Ошибки памяти

apple · iphone os18 дек. 2019 г.

A use after free issue was addressed with improved memory management.

• RCE без входа
• Ошибки памяти

apple · mac os x18 дек. 2019 г.

Multiple memory corruption issues were addressed with improved memory handling.

• RCE без входа
• Ошибки памяти

apple · icloud18 дек. 2019 г.

Multiple memory corruption issues were addressed with improved memory handling.

• RCE без входа
• Ошибки памяти

apple · icloud18 дек. 2019 г.

Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover.

• Без аутентификации

djangoproject · django18 дек. 2019 г.

In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the prese

• Без аутентификации
• Обход пути

sonicwall · sma 100 firmware18 дек. 2019 г.

Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.301

• RCE без входа
• Ошибки памяти

adobe · acrobat dc19 дек. 2019 г.

phpMyChat-Plus 1.98 is vulnerable to reflected XSS via JavaScript injection into the password reset URL.

• Без аутентификации
• XSS

ciprianmp · phpmychat-plus20 дек. 2019 г.

An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices.

• Без аутентификации
• Отказ в обслуживании

mi · dgnwg03lm firmware20 дек. 2019 г.

Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely exe

• RCE без входа
• Десериализация

apache · log4j20 дек. 2019 г.

An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3.

• Без аутентификации
• Отказ в обслуживании

linux · linux kernel23 дек. 2019 г.

When using FORM authentication with Apache Tomcat 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 and 7.0.0 to 7.0.98 there was a narrow window where an

• Без аутентификации

apache · tomcat23 дек. 2019 г.

SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c.

• Без аутентификации

sqlite · sqlite24 дек. 2019 г.

mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method.

• RCE

mongo-express project · mongo-express24 дек. 2019 г.

The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user informat

• Без аутентификации
• Нарушение контроля доступа (IDOR)

icegram · email subscribers \& newsletters25 дек. 2019 г.

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0.

• Без аутентификации
• Обход пути

citrix · application delivery controller firmware27 дек. 2019 г.

Hikvision DS-2CD7153-E IP Camera has Privilege Escalation

hikvision · ds-2cd7153-e firmware27 дек. 2019 г.

Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials

• Без аутентификации
• Обход аутентификации
• Зашитые учётные данные

hikvision · ds-2cd7153-e firmware27 дек. 2019 г.

AVTECH AVN801 DVR has a security bypass via the administration login captcha

• Без аутентификации
• Обход аутентификации

avtech · avn801 dvr firmware27 дек. 2019 г.

An issue was discovered on Alcatel-Lucent OmniVista 4760 devices.

• RCE без входа
• Обход аутентификации
• Обход пути

al-enterprise · omnivista 476027 дек. 2019 г.

Buffer overflow in Senkas Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a POST request.

• RCE без входа

senkas kolibri project · senkas kolibri27 дек. 2019 г.

TVT NVMS-1000 devices allow GET /..

• Без аутентификации
• Обход пути

tvt · nvms-1000 firmware29 дек. 2019 г.

In Nagios XI 5.6.9, XSS exists via the nocscreenapi.php host, hostgroup, or servicegroup parameter, or the schedulereport.php hour or freque

• XSS

nagios · nagios xi30 дек. 2019 г.

Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter.

• RCE

apache · solr30 дек. 2019 г.

The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to exec

• RCE без входа
• Инъекция команд

dlink · dir-859 firmware30 дек. 2019 г.

A directory traversal and local file inclusion vulnerability in FPProducerInternetServer.exe in Ricoh MarcomCentral, formerly PTI Marketing,

• RCE без входа
• Обход пути

ricoh · fusionpro vdp31 дек. 2019 г.

In Nagios XI 5.6.9, an authenticated user is able to execute arbitrary OS commands via shell metacharacters in the id parameter to scheduler

• RCE
• Инъекция команд

nagios · nagios xi31 дек. 2019 г.