İçeriğe atla
Noroxi

Yayın tarihine göre

Ocak 2020: sömürülen ve yeni ciddi CVE kayıtları

119 kayıt · 7 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2013-3619
    60Bu hafta

    Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT_X9_317 and firmware for

    YüksekCVSS 8,1SilahlaştırılmışEPSS %9

    supermicro · smt x9 firmware2 Oca 2020

  • CVE-2013-3944
    39İzleyin

    Stack-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via

    YüksekCVSS 7,8İstismar yokEPSS %27

    extensis · mrsid2 Oca 2020

  • CVE-2016-1000027
    49Planlayın

    Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untru

    KritikCVSS 9,8Kavram kanıtıEPSS %33

    vmware · spring framework2 Oca 2020

  • CVE-2019-5063
    41Planlayın

    An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0.

    YüksekCVSS 8,8İstismar yokEPSS %21

    opencv · opencv3 Oca 2020

  • CVE-2019-5064
    38İzleyin

    An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, before version 4.2.0.

    YüksekCVSS 8,8İstismar yokEPSS %10

    opencv · opencv3 Oca 2020

  • CVE-2014-8516
    64Bu hafta

    Unrestricted file upload vulnerability in Visual Mining NetCharts Server allows remote attackers to execute arbitrary code by uploading a fi

    KritikCVSS 9,8SilahlaştırılmışEPSS %81

    cloudfastpath · netcharts server3 Oca 2020

  • CVE-2020-5192
    42Planlayın

    PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple SQL injection vulnerabilities: multiple pages and parameters are not

    YüksekCVSS 8,8Kavram kanıtıEPSS %23

    phpgurukul · hospital management system5 Oca 2020

  • CVE-2019-15975
    68Bu hafta

    Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

    KritikCVSS 9,8SilahlaştırılmışEPSS %96

    cisco · data center network manager6 Oca 2020

  • CVE-2019-15976
    67Bu hafta

    Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

    KritikCVSS 9,8Kavram kanıtıEPSS %92

    cisco · data center network manager6 Oca 2020

  • CVE-2019-15977
    41Planlayın

    Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

    YüksekCVSS 7,5Kavram kanıtıEPSS %38

    cisco · data center network manager6 Oca 2020

  • CVE-2019-15978
    39İzleyin

    Cisco Data Center Network Manager Command Injection Vulnerabilities

    YüksekCVSS 7,2Kavram kanıtıEPSS %37

    cisco · data center network manager6 Oca 2020

  • CVE-2019-15980
    43Planlayın

    Cisco Data Center Network Manager Path Traversal Vulnerabilities

    YüksekCVSS 7,2İstismar yokEPSS %49

    cisco · data center network manager6 Oca 2020

  • CVE-2019-15981
    32İzleyin

    Cisco Data Center Network Manager Path Traversal Vulnerabilities

    YüksekCVSS 7,2İstismar yokEPSS %14

    cisco · data center network manager6 Oca 2020

  • CVE-2019-15982
    32İzleyin

    Cisco Data Center Network Manager Path Traversal Vulnerabilities

    YüksekCVSS 7,2İstismar yokEPSS %14

    cisco · data center network manager6 Oca 2020

  • CVE-2019-15984
    42Planlayın

    Cisco Data Center Network Manager SQL Injection Vulnerabilities

    YüksekCVSS 7,2Kavram kanıtıEPSS %46

    cisco · data center network manager6 Oca 2020

  • CVE-2020-5514
    49Planlayın

    Gila CMS 1.11.8 allows Unrestricted Upload of a File with a Dangerous Type via .phar or .phtml to the lzld/thumb?src= URI.

    KritikCVSS 9,1İstismar yokEPSS %44

    gilacms · gila cms6 Oca 2020

  • CVE-2020-5515
    36İzleyin

    Gila CMS 1.11.8 allows /admin/sql?query= SQL Injection.

    YüksekCVSS 7,2Kavram kanıtıEPSS %26

    gilacms · gila cms6 Oca 2020

  • CVE-2019-19509
    56Planlayın

    An issue was discovered in rConfig 3.9.3.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %71

    rconfig · rconfig6 Oca 2020

  • CVE-2020-5512
    33İzleyin

    Gila CMS 1.11.8 allows /admin/media?path=../ Path Traversal.

    OrtaCVSS 6,8İstismar yokEPSS %18

    gilacms · gila cms6 Oca 2020

  • CVE-2020-5513
    35İzleyin

    Gila CMS 1.11.8 allows /cm/delete?t=../ Directory Traversal.

    OrtaCVSS 6,8İstismar yokEPSS %25

    gilacms · gila cms6 Oca 2020

  • CVE-2015-4553
    52Planlayın

    A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell.

    YüksekCVSS 8,8Kavram kanıtıEPSS %56

    dedecms · dedecms6 Oca 2020

  • CVE-2014-8673
    43Planlayın

    Multiple SQL vulnerabilities exist in planning.php, user_list.php, projets.php, user_groupes.php, and groupe_list.php in Simple Online Plann

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    soplanning · soplanning7 Oca 2020

  • CVE-2020-5307
    44Planlayın

    PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to SQL injection, as demonstrated by the username parameter in index.php, the

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    phpgurukul · dairy farm shop management system7 Oca 2020

  • CVE-2019-17147
    39İzleyin

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers.

    YüksekCVSS 8,8Kavram kanıtıEPSS %13

    tp-link · tl-wr841n firmware7 Oca 2020

  • CVE-2019-20361
    65Bu hafta

    There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to be passed to the data

    KritikCVSS 9,8SilahlaştırılmışEPSS %85

    icegram · email subscribers \& newsletters8 Oca 2020

  • CVE-2019-19494
    60Bu hafta

    Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary

    YüksekCVSS 8,8SilahlaştırılmışEPSS %23

    sagemcom · f\@st 3890 firmware9 Oca 2020

  • CVE-2019-20224
    50Planlayın

    netflow_get_stats in functions_netflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary OS commands via shell

    YüksekCVSS 8,8Kavram kanıtıEPSS %49

    artica · pandora fms9 Oca 2020

  • CVE-2019-20372
    25İzleyin

    NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to

    OrtaCVSS 5,3Kavram kanıtıEPSS %14

    f5 · nginx9 Oca 2020

  • CVE-2012-3807
    48Planlayın

    Samsung Kies before 2.5.0.12094_27_11 has arbitrary file execution.

    KritikCVSS 9,8Kavram kanıtıEPSS %31

    samsung · kies9 Oca 2020

  • CVE-2020-5504
    47Planlayın

    In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page.

    YüksekCVSS 8,8Kavram kanıtıEPSS %39

    phpmyadmin · phpmyadmin9 Oca 2020

  • CVE-2020-6756
    42Planlayın

    languageOptions.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version) allows unauthenticated attackers to remotely execute code

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    rasilient · pixelstor 5000 firmware9 Oca 2020

  • CVE-2014-5081
    42Planlayın

    sphider prior to 1.3.6, sphider-pro prior to 3.2, and sphider-plus prior to 3.2 allow authentication bypass

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    sphider · sphider10 Oca 2020

  • CVE-2012-4284
    60Bu hafta

    A Privilege Escalation vulnerability exists in Viscosity 1.4.1 on Mac OS X due to a path name validation issue in the setuid-set ViscosityHe

    KritikCVSS 9,8SilahlaştırılmışEPSS %69

    sparklabs · viscosity10 Oca 2020

  • CVE-2019-13767
    40Planlayın

    Use after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote attacker who had compromised the renderer process to

    YüksekCVSS 8,8İstismar yokEPSS %15

    google · chrome10 Oca 2020

  • CVE-2014-6038
    60Bu hafta

    Zoho ManageEngine EventLog Analyzer versions 7 through 9.9 build 9002 have a database Information Disclosure Vulnerability.

    YüksekCVSS 7,5SilahlaştırılmışEPSS %72

    zohocorp · manageengine eventlog analyzer13 Oca 2020

  • CVE-2014-6039
    60Bu hafta

    ManageEngine EventLog Analyzer version 7 through 9.9 build 9002 has a Credentials Disclosure Vulnerability.

    YüksekCVSS 7,5SilahlaştırılmışEPSS %68

    zohocorp · manageengine eventlog analyzer13 Oca 2020

  • CVE-2013-6225
    47Planlayın

    LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %26

    livezilla · livezilla13 Oca 2020

  • CVE-2015-3159
    31İzleyin

    The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) does not properly handle the process env

    YüksekCVSS 7,8İstismar yokEPSS %0

    redhat · automatic bug reporting tool14 Oca 2020

  • CVE-2020-5505
    52Planlayın

    Freelancy v1.0.0 allows remote command execution via the "file":"data:application/x-php;base64 substring (in conjunction with "type":"applic

    KritikCVSS 9,8İstismar yokEPSS %44

    vaaip · freelancy14 Oca 2020

  • CVE-2020-0601
    89Hemen

    A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attac

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %89

    microsoft · windows 10 150714 Oca 2020

  • CVE-2020-0603
    41Planlayın

    A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who su

    YüksekCVSS 8,8İstismar yokEPSS %21

    microsoft · asp.net core14 Oca 2020

  • CVE-2020-0605
    40Planlayın

    A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who s

    YüksekCVSS 8,8İstismar yokEPSS %17

    microsoft · .net framework14 Oca 2020

  • CVE-2020-0606
    40Planlayın

    A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who s

    YüksekCVSS 8,8İstismar yokEPSS %17

    microsoft · .net framework14 Oca 2020

  • CVE-2020-0609
    62Bu hafta

    A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the

    KritikCVSS 9,8Kavram kanıtıEPSS %77

    microsoft · windows server 201214 Oca 2020

  • CVE-2020-0610
    59Planlayın

    A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the

    KritikCVSS 9,8Kavram kanıtıEPSS %67

    microsoft · windows server 201214 Oca 2020

  • CVE-2020-0638
    62Bu hafta

    An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an at

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %2

    microsoft · windows 10 170914 Oca 2020

  • CVE-2020-0646
    99Hemen

    A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    microsoft · .net framework14 Oca 2020

  • CVE-2020-0650
    36İzleyin

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka '

    YüksekCVSS 7,8İstismar yokEPSS %17

    microsoft · excel14 Oca 2020

  • CVE-2020-0651
    36İzleyin

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka '

    YüksekCVSS 7,8İstismar yokEPSS %17

    microsoft · excel14 Oca 2020

  • CVE-2020-0652
    36İzleyin

    A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka

    YüksekCVSS 7,8İstismar yokEPSS %17

    microsoft · excel14 Oca 2020

  • CVE-2020-0653
    37İzleyin

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka '

    YüksekCVSS 7,8İstismar yokEPSS %20

    microsoft · office 365 proplus14 Oca 2020

  • CVE-2015-7874
    43Planlayın

    Buffer overflow in the chat server in KiTTY Portable 0.65.0.2p and earlier allows remote attackers to execute arbitrary code via a long nick

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    portapps · kitty portable15 Oca 2020

  • CVE-2020-2096
    52Planlayın

    Jenkins Gitlab Hook Plugin 1.4.2 and earlier does not escape project names in the build_now endpoint, resulting in a reflected XSS vulnerabi

    OrtaCVSS 6,1Kavram kanıtıEPSS %92

    jenkins · gitlab hook15 Oca 2020

  • CVE-2019-16469
    35İzleyin

    Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an expression language injection vulnerability.

    YüksekCVSS 7,5Kavram kanıtıEPSS %17

    adobe · experience manager15 Oca 2020

  • CVE-2020-2551
    97Hemen

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components).

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %92

    oracle · weblogic server15 Oca 2020

  • CVE-2020-2555
    98Hemen

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation).

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97

    oracle · access manager15 Oca 2020

  • CVE-2020-7048
    43Planlayın

    The WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any unauthenticated user to reset any table in the databas

    KritikCVSS 9,1Kavram kanıtıEPSS %22

    webfactoryltd · wp database reset16 Oca 2020

  • CVE-2019-15742
    40Planlayın

    A local privilege-escalation vulnerability exists in the Poly Plantronics Hub before 3.14 for Windows client application.

    YüksekCVSS 7,8SilahlaştırılmışEPSS %4

    plantronics · plantronics hub16 Oca 2020

  • CVE-2019-17361
    44Planlayın

    In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection.

    KritikCVSS 9,8İstismar yokEPSS %15

    saltstack · salt16 Oca 2020

  • CVE-2020-5398
    57Planlayın

    RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application

    YüksekCVSS 7,5Kavram kanıtıEPSS %88

    vmware · spring framework17 Oca 2020

  • CVE-2014-5007
    50Planlayın

    Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop Central Managed Serv

    KritikCVSS 9,8Kavram kanıtıEPSS %37

    zohocorp · manageengine desktop central17 Oca 2020

  • CVE-2020-7237
    46Planlayın

    Cacti 1.2.8 allows Remote Code Execution (by privileged users) via shell metacharacters in the Performance Boost Debug Log field of poller_a

    YüksekCVSS 8,8İstismar yokEPSS %37

    cacti · cacti20 Oca 2020

  • CVE-2020-7246
    60Bu hafta

    A remote code execution (RCE) vulnerability exists in qdPM 9.1 and earlier.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %83

    qdpm · qdpm21 Oca 2020

  • CVE-2019-17357
    36İzleyin

    Cacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability affecting how template identifiers are handled when

    OrtaCVSS 6,5İstismar yokEPSS %34

    cacti · cacti21 Oca 2020

  • CVE-2019-18426
    82Hemen

    A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-s

    YüksekCVSS 8,2KEVSilahlaştırılmışEPSS %67

    whatsapp · whatsapp21 Oca 2020

  • CVE-2013-6785
    40Planlayın

    Directory traversal vulnerability in url_redirect.cgi in Supermicro IPMI before SMT_X9_315 allows authenticated attackers to read arbitrary

    OrtaCVSS 4,3SilahlaştırılmışEPSS %4

    supermicro · intelligent platform management interface23 Oca 2020

  • CVE-2019-19838
    46Planlayın

    emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribu

    KritikCVSS 9,8İstismar yokEPSS %24

    ruckuswireless · unleashed23 Oca 2020

  • CVE-2012-6083
    34İzleyin

    Freeciv before 2.3.3 allows remote attackers to cause a denial of service via a crafted packet.

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    freeciv · freeciv23 Oca 2020

  • CVE-2019-16516
    27İzleyin

    An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185.

    OrtaCVSS 5,3Kavram kanıtıEPSS %19

    connectwise · control23 Oca 2020

  • CVE-2013-1592
    46Planlayın

    A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending specially crafted SAP Mes

    KritikCVSS 9,8Kavram kanıtıEPSS %24

    sap · netweaver23 Oca 2020

  • CVE-2012-6649
    44Planlayın

    WordPress WP GPX Maps Plugin 1.1.21 allows remote attackers to execute arbitrary PHP code via improper file upload.

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    devfarm · wp gpx maps23 Oca 2020

  • CVE-2012-6663
    60Bu hafta

    General Electric D20ME devices are not properly configured and reveal plaintext passwords.

    YüksekCVSS 7,5SilahlaştırılmışEPSS %9

    ge · d20me firmware23 Oca 2020

  • CVE-2019-17570
    54Planlayın

    An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrp

    KritikCVSS 9,8Kavram kanıtıEPSS %49

    apache · xml-rpc23 Oca 2020

  • CVE-2013-1595
    51Planlayın

    A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the Authorization heade

    KritikCVSS 9,8Kavram kanıtıEPSS %41

    vivotek · pt7135 firmware24 Oca 2020

  • CVE-2013-1596
    24İzleyin

    An Authentication Bypass Vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via specially crafted RTSP packets to TCP port 554

    OrtaCVSS 5,3Kavram kanıtıEPSS %10

    vivotek · pt7135 firmware24 Oca 2020

  • CVE-2019-19363
    40Planlayın

    An issue was discovered in Ricoh (including Savin and Lanier) Windows printer drivers prior to 2020 that allows attackers local privilege es

    YüksekCVSS 7,8SilahlaştırılmışEPSS %4

    ricoh · generic pcl5 driver24 Oca 2020

  • CVE-2013-1597
    30İzleyin

    A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a specially crafted GET request, which could let

    OrtaCVSS 6,5Kavram kanıtıEPSS %14

    vivotek · pt7135 firmware24 Oca 2020

  • CVE-2013-1598
    41Planlayın

    A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to the farseer.out binary

    YüksekCVSS 8,8Kavram kanıtıEPSS %20

    vivotek · pt7135 firmware24 Oca 2020

  • CVE-2019-1349
    45Planlayın

    A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code E

    YüksekCVSS 8,8İstismar yokEPSS %34

    microsoft · visual studio 201724 Oca 2020

  • CVE-2019-1350
    43Planlayın

    A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code E

    YüksekCVSS 8,8İstismar yokEPSS %25

    microsoft · visual studio 201724 Oca 2020

  • CVE-2019-1352
    42Planlayın

    A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code E

    YüksekCVSS 8,8İstismar yokEPSS %24

    microsoft · visual studio 201724 Oca 2020

  • CVE-2019-1354
    42Planlayın

    A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code E

    YüksekCVSS 8,8İstismar yokEPSS %22

    microsoft · visual studio 201724 Oca 2020

  • CVE-2020-7980
    64Bu hafta

    Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.c

    KritikCVSS 9,8Kavram kanıtıEPSS %82

    intelliantech · aptus web25 Oca 2020

  • CVE-2012-1495
    63Bu hafta

    install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter.

    KritikCVSS 9,8SilahlaştırılmışEPSS %79

    webcalendar project · webcalendar27 Oca 2020

  • CVE-2019-19825
    48Planlayın

    On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {"topicurl":"setting/getSanvas"} POST to the boafrm/

    KritikCVSS 9,8Kavram kanıtıEPSS %29

    totolink · a3002ru firmware27 Oca 2020

  • CVE-2020-7949
    32İzleyin

    schemasystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by creating a gaming se

    YüksekCVSS 7,8Kavram kanıtıEPSS %4

    valvesoftware · dota 227 Oca 2020

  • CVE-2013-7390
    61Bu hafta

    Unrestricted file upload vulnerability in AgentLogUploadServlet in ManageEngine DesktopCentral 7.x and 8.0.0 before build 80293 allows remot

    KritikCVSS 9,8SilahlaştırılmışEPSS %74

    zohocorp · manageengine desktop central27 Oca 2020

  • CVE-2014-8741
    62Bu hafta

    Directory traversal vulnerability in the GfdFileUploadServerlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers

    KritikCVSS 9,8SilahlaştırılmışEPSS %77

    lexmark · markvision enterprise27 Oca 2020

  • CVE-2019-19824
    43Planlayın

    On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the b

    YüksekCVSS 8,8Kavram kanıtıEPSS %25

    totolink · a3002ru firmware27 Oca 2020

  • CVE-2013-2474
    33İzleyin

    Directory traversal vulnerability in AWS XMS 2.5 allows remote attackers to view arbitrary files via the 'what' parameter.

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    aws-dms · aws xms27 Oca 2020

  • CVE-2020-7799
    34İzleyin

    An issue was discovered in FusionAuth before 1.11.0.

    YüksekCVSS 7,2Kavram kanıtıEPSS %19

    fusionauth · fusionauth28 Oca 2020

  • CVE-2013-2571
    44Planlayın

    Iris 3.8 before build 1548, as used in Xpient point of sale (POS) systems, allows remote attackers to execute arbitrary commands via a craft

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    hcomm · xpient iris28 Oca 2020

  • CVE-2012-6610
    40Planlayın

    Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote authenticated users to execute arbitrary commands as demon

    YüksekCVSS 8,8SilahlaştırılmışEPSS %10

    polycom · hdx video end points28 Oca 2020

  • CVE-2013-4863
    39İzleyin

    The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows (1) remote attackers to execute arbitrary Lua code vi

    YüksekCVSS 8,8Kavram kanıtıEPSS %12

    micasaverde · veralite firmware28 Oca 2020

  • CVE-2013-1599
    51Planlayın

    A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in D-Link IP Cameras DCS-3411/3430 firmware 1.02, DCS-5605/

    KritikCVSS 9,8Kavram kanıtıEPSS %40

    dlink · dcs-3411 firmware28 Oca 2020

  • CVE-2013-2748
    43Planlayın

    Belkin Wemo Switch before WeMo_US_2.00.2176.PVT could allow remote attackers to upload arbitrary files onto the system.

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    belkin · wemo switch firmware28 Oca 2020

  • CVE-2013-1600
    27İzleyin

    An Authentication Bypass vulnerability exists in upnp/asf-mp4.asf when streaming live video in D-Link TESCO DCS-2121 1.05_TESCO, TESCO DCS-2

    OrtaCVSS 5,3Kavram kanıtıEPSS %18

    dlink · dcs-2102 firmware28 Oca 2020

  • CVE-2013-1601
    25İzleyin

    An Information Disclosure vulnerability exists due to a failure to restrict access on the lums.cgi script when processing a live video strea

    OrtaCVSS 5,3Kavram kanıtıEPSS %12

    dlink · dcs-3411 firmware28 Oca 2020

  • CVE-2013-3214
    64Bu hafta

    vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'.

    KritikCVSS 9,8SilahlaştırılmışEPSS %84

    vtiger · vtiger crm28 Oca 2020

  • CVE-2020-8417
    39İzleyin

    The Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu.

    YüksekCVSS 8,8Kavram kanıtıEPSS %11

    codesnippets · code snippets28 Oca 2020