İçeriğe atla
Noroxi

Yayın tarihine göre

Şubat 2020: sömürülen ve yeni ciddi CVE kayıtları

110 kayıt · 16 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2020-8515
    99Hemen

    DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code executi

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    draytek · vigor2960 firmware1 Şub 2020

  • CVE-2020-7471
    59Planlayın

    Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter

    KritikCVSS 9,8Kavram kanıtıEPSS %65

    djangoproject · django3 Şub 2020

  • CVE-2013-2621
    27İzleyin

    Open Redirection Vulnerability in the redir.php script in Telaen before 1.3.1 allows remote attackers to redirect victims to arbitrary websi

    OrtaCVSS 6,1Kavram kanıtıEPSS %10

    telaen project · telaen3 Şub 2020

  • CVE-2019-16893
    41Planlayın

    The Web Management of TP-Link TP-SG105E V4 1.0.0 Build 20181120 devices allows an unauthenticated attacker to reboot the device via a reboot

    YüksekCVSS 7,5Kavram kanıtıEPSS %37

    tp-link · tp-sg105e firmware3 Şub 2020

  • CVE-2020-8597
    45Planlayın

    eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    point-to-point protocol project · point-to-point protocol3 Şub 2020

  • CVE-2013-7051
    40Planlayın

    D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters

    YüksekCVSS 8,8Kavram kanıtıEPSS %15

    dlink · dir-100 firmware4 Şub 2020

  • CVE-2013-7052
    46Planlayın

    D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script

    KritikCVSS 9,8Kavram kanıtıEPSS %24

    dlink · dir-100 firmware4 Şub 2020

  • CVE-2013-2678
    37İzleyin

    Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers to obtain sensitive

    YüksekCVSS 8,1Kavram kanıtıEPSS %16

    cisco · linksys e4200 firmware4 Şub 2020

  • CVE-2020-8450
    51Planlayın

    An issue was discovered in Squid before 4.10.

    YüksekCVSS 7,3İstismar yokEPSS %71

    squid-cache · squid4 Şub 2020

  • CVE-2019-12528
    33İzleyin

    An issue was discovered in Squid before 4.10.

    YüksekCVSS 7,5İstismar yokEPSS %10

    squid-cache · squid4 Şub 2020

  • CVE-2020-6754
    67Bu hafta

    dotCMS before 5.2.4 is vulnerable to directory traversal, leading to incorrect access control.

    KritikCVSS 9,8İstismar yokEPSS %94

    dotcms · dotcms5 Şub 2020

  • CVE-2020-3118
    69Bu hafta

    Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %11

    cisco · ios xr5 Şub 2020

  • CVE-2013-2681
    42Planlayın

    Cisco Linksys E4200 1.0.05 Build 7 devices contain a Security Bypass Vulnerability which could allow remote attackers to gain unauthorized a

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    cisco · linksys e4200 firmware5 Şub 2020

  • CVE-2020-8641
    38İzleyin

    Lotus Core CMS 1.0.1 allows authenticated Local File Inclusion of .php files via directory traversal in the index.php page_slug parameter.

    YüksekCVSS 8,8Kavram kanıtıEPSS %10

    lotus core cms project · lotus core cms5 Şub 2020

  • CVE-2020-8644
    95Hemen

    PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %86

    playsms · playsms5 Şub 2020

  • CVE-2015-6000
    47Planlayın

    Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger/actions/CompanyDeta

    YüksekCVSS 8,8SilahlaştırılmışEPSS %40

    vtiger · vtiger crm6 Şub 2020

  • CVE-2014-2030
    38İzleyin

    Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick, possibly 6.8.8-5, allows remote attackers to cause

    YüksekCVSS 8,8Kavram kanıtıEPSS %11

    imagemagick · imagemagick6 Şub 2020

  • CVE-2020-8771
    53Planlayın

    The Time Capsule plugin before 1.21.16 for WordPress has an authentication bypass.

    KritikCVSS 9,8Kavram kanıtıEPSS %46

    wptimecapsule · wp time capsule6 Şub 2020

  • CVE-2020-8772
    65Bu hafta

    The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in iwp_mmb_set_request in init.php.

    KritikCVSS 9,8SilahlaştırılmışEPSS %88

    revmakx · infinitewp client6 Şub 2020

  • CVE-2020-8657
    97Hemen

    An issue was discovered in EyesOfNetwork 5.3.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %91

    eyesofnetwork · eyesofnetwork6 Şub 2020

  • CVE-2013-2683
    25İzleyin

    Cisco Linksys E4200 1.0.05 Build 7 devices contain an Information Disclosure Vulnerability which allows remote attackers to obtain private I

    OrtaCVSS 5,3Kavram kanıtıEPSS %13

    cisco · linksys e4200 firmware6 Şub 2020

  • CVE-2013-3568
    43Planlayın

    Cross-site request forgery (CSRF) vulnerability in Cisco Linksys WRT110 allows remote attackers to hijack the authentication of users for re

    YüksekCVSS 8,8SilahlaştırılmışEPSS %25

    cisco · linksys wrt110 firmware6 Şub 2020

  • CVE-2020-8654
    63Bu hafta

    An issue was discovered in EyesOfNetwork 5.3.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %91

    eyesofnetwork · eyesofnetwork6 Şub 2020

  • CVE-2020-8655
    79Bu hafta

    An issue was discovered in EyesOfNetwork 5.3.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %60

    eyesofnetwork · eyesofnetwork6 Şub 2020

  • CVE-2020-8656
    64Bu hafta

    An issue was discovered in EyesOfNetwork 5.3.

    KritikCVSS 9,8SilahlaştırılmışEPSS %84

    eyesofnetwork · eyesofnetwork6 Şub 2020

  • CVE-2013-2009
    39İzleyin

    WordPress WP Super Cache Plugin 1.2 has Remote PHP Code Execution

    YüksekCVSS 8,8Kavram kanıtıEPSS %12

    automattic · wp super cache7 Şub 2020

  • CVE-2013-3591
    48Planlayın

    vTiger CRM 5.3 and 5.4: 'files' Upload Folder Arbitrary PHP Code Execution Vulnerability

    YüksekCVSS 8,8SilahlaştırılmışEPSS %43

    vtiger · vtiger crm7 Şub 2020

  • CVE-2013-3628
    55Planlayın

    Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerability

    YüksekCVSS 8,8SilahlaştırılmışEPSS %67

    zabbix · zabbix7 Şub 2020

  • CVE-2013-3629
    48Planlayın

    ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution

    YüksekCVSS 8,8SilahlaştırılmışEPSS %43

    ispconfig · ispconfig7 Şub 2020

  • CVE-2019-15604
    36İzleyin

    Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when sending a crafted X.509 certificate

    YüksekCVSS 7,5İstismar yokEPSS %19

    nodejs · node.js7 Şub 2020

  • CVE-2019-15605
    56Planlayın

    HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed

    KritikCVSS 9,8Kavram kanıtıEPSS %57

    nodejs · node.js7 Şub 2020

  • CVE-2019-15606
    45Planlayın

    Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value compariso

    KritikCVSS 9,8İstismar yokEPSS %20

    nodejs · node.js7 Şub 2020

  • CVE-2019-18988
    59Planlayın

    TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for different customers' in

    YüksekCVSS 7,0KEVSilahlaştırılmışEPSS %4

    teamviewer · teamviewer7 Şub 2020

  • CVE-2014-5468
    51Planlayın

    A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cfm to specify a malic

    YüksekCVSS 8,8SilahlaştırılmışEPSS %52

    getrailo · railo7 Şub 2020

  • CVE-2014-5091
    44Planlayın

    A vulnerability exits in Status2K 2.5 Server Monitoring Software via the multies parameter to includes/functions.php, which could let a mali

    KritikCVSS 9,8Kavram kanıtıEPSS %15

    status2k · status2k7 Şub 2020

  • CVE-2019-19356
    68Bu hafta

    Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page.

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %28

    netis-systems · wf2419 firmware7 Şub 2020

  • CVE-2014-7863
    55Planlayın

    The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager before 11.9 build 11912, OpManager 8 through 1

    YüksekCVSS 7,5SilahlaştırılmışEPSS %83

    zohocorp · manageengine applications manager8 Şub 2020

  • CVE-2014-8739
    66Bu hafta

    Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Cre

    KritikCVSS 9,8SilahlaştırılmışEPSS %91

    creative-solutions · creative contact form8 Şub 2020

  • CVE-2012-4512
    38İzleyin

    The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly

    YüksekCVSS 8,8Kavram kanıtıEPSS %11

    kde · kde8 Şub 2020

  • CVE-2020-8840
    47Planlayın

    FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyedi

    KritikCVSS 9,8Kavram kanıtıEPSS %26

    fasterxml · jackson-databind10 Şub 2020

  • CVE-2013-1360
    46Planlayın

    An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Un

    KritikCVSS 9,8Kavram kanıtıEPSS %23

    sonicwall · analyzer11 Şub 2020

  • CVE-2013-0803
    61Bu hafta

    A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arbitrary code.

    KritikCVSS 9,8SilahlaştırılmışEPSS %74

    polarbear cms project · polarbear cms11 Şub 2020

  • CVE-2013-1359
    66Bu hafta

    An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Un

    KritikCVSS 9,8SilahlaştırılmışEPSS %89

    sonicwall · analyzer11 Şub 2020

  • CVE-2013-3684
    45Planlayın

    NextGEN Gallery plugin before 1.9.13 for WordPress: ngggallery.php file upload

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    imagely · nextgen gallery11 Şub 2020

  • CVE-2020-0618
    95Hemen

    A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Micr

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %99

    microsoft · sql server11 Şub 2020

  • CVE-2020-0655
    52Planlayın

    A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an authenticated at

    YüksekCVSS 8,0İstismar yokEPSS %65

    microsoft · windows 1011 Şub 2020

  • CVE-2020-0662
    39İzleyin

    A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka 'Windows Remote Code Execution Vulnerabi

    YüksekCVSS 8,8İstismar yokEPSS %13

    microsoft · windows 1011 Şub 2020

  • CVE-2020-0668
    39İzleyin

    An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation o

    YüksekCVSS 7,8SilahlaştırılmışEPSS %25

    microsoft · windows 1011 Şub 2020

  • CVE-2020-0674
    86Hemen

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scrip

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %86

    microsoft · internet explorer11 Şub 2020

  • CVE-2020-0681
    33İzleyin

    A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote De

    YüksekCVSS 7,5İstismar yokEPSS %10

    microsoft · windows 1011 Şub 2020

  • CVE-2020-0683
    63Bu hafta

    An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Ele

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %7

    microsoft · windows 10 150711 Şub 2020

  • CVE-2020-0688
    95Hemen

    A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, ak

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %99

    microsoft · exchange server11 Şub 2020

  • CVE-2020-0708
    35İzleyin

    A remote code execution vulnerability exists when the Windows Imaging Library improperly handles memory.To exploit this vulnerability, an at

    YüksekCVSS 7,8İstismar yokEPSS %13

    microsoft · windows 1011 Şub 2020

  • CVE-2020-0710
    33İzleyin

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin

    YüksekCVSS 7,5İstismar yokEPSS %10

    microsoft · edge11 Şub 2020

  • CVE-2020-0711
    33İzleyin

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin

    YüksekCVSS 7,5İstismar yokEPSS %10

    microsoft · edge11 Şub 2020

  • CVE-2020-0712
    33İzleyin

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin

    YüksekCVSS 7,5İstismar yokEPSS %10

    microsoft · edge11 Şub 2020

  • CVE-2020-0713
    33İzleyin

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin

    YüksekCVSS 7,5İstismar yokEPSS %10

    microsoft · edge11 Şub 2020

  • CVE-2020-0729
    44Planlayın

    A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An atta

    YüksekCVSS 8,8İstismar yokEPSS %30

    microsoft · windows 1011 Şub 2020

  • CVE-2020-0734
    40Planlayın

    A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote De

    YüksekCVSS 8,8İstismar yokEPSS %16

    microsoft · windows 1011 Şub 2020

  • CVE-2020-0759
    40Planlayın

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka '

    YüksekCVSS 8,8İstismar yokEPSS %15

    microsoft · excel11 Şub 2020

  • CVE-2020-0767
    35İzleyin

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin

    YüksekCVSS 7,5İstismar yokEPSS %17

    microsoft · edge11 Şub 2020

  • CVE-2014-2595
    44Planlayın

    Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    barracuda · web application firewall11 Şub 2020

  • CVE-2014-9390
    62Bu hafta

    Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before

    KritikCVSS 9,8SilahlaştırılmışEPSS %75

    mercurial · mercurial11 Şub 2020

  • CVE-2013-2010
    61Bu hafta

    WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability

    KritikCVSS 9,8SilahlaştırılmışEPSS %73

    automattic · wp super cache12 Şub 2020

  • CVE-2013-2097
    39İzleyin

    ZPanel through 10.1.0 has Remote Command Execution

    YüksekCVSS 7,8SilahlaştırılmışEPSS %26

    zpanel project · zpanel12 Şub 2020

  • CVE-2013-6236
    42Planlayın

    IZON IP 2.0.2: hard-coded password vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    izoncam · izon ip firmware12 Şub 2020

  • CVE-2020-7046
    45Planlayın

    lib-smtp in submission-login and lmtp in Dovecot 2.3.9 before 2.3.9.3 mishandles truncated UTF-8 data in command parameters, as demonstrated

    YüksekCVSS 7,5İstismar yokEPSS %51

    dovecot · dovecot12 Şub 2020

  • CVE-2020-8947
    35İzleyin

    functions_netflow.php in Artica Pandora FMS 7.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the ind

    YüksekCVSS 7,2Kavram kanıtıEPSS %22

    artica · pandora fms12 Şub 2020

  • CVE-2011-4908
    56Planlayın

    TinyBrowser plugin for Joomla! before 1.5.13 allows arbitrary file upload via upload.php.

    KritikCVSS 9,8SilahlaştırılmışEPSS %55

    tiny · tinybrowser12 Şub 2020

  • CVE-2020-7209
    69Bu hafta

    LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2.

    KritikCVSS 9,8SilahlaştırılmışEPSS %98

    hp · linuxki12 Şub 2020

  • CVE-2020-3757
    38İzleyin

    Adobe Flash Player versions 32.0.0.321 and earlier, 32.0.0.314 and earlier, 32.0.0.321 and earlier, and 32.0.0.255 and earlier have a type c

    YüksekCVSS 8,8İstismar yokEPSS %10

    adobe · flash player13 Şub 2020

  • CVE-2014-4170
    43Planlayın

    A Privilege Escalation Vulnerability exists in Free Reprintables ArticleFR 11.06.2014 due to insufficient access restrictions in the data.ph

    KritikCVSS 9,8Kavram kanıtıEPSS %14

    freereprintables · articlefr13 Şub 2020

  • CVE-2015-6589
    39İzleyin

    Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before 8.0.0.23, 9.0.0.0 be

    YüksekCVSS 8,8Kavram kanıtıEPSS %13

    kaseya · virtual system administrator13 Şub 2020

  • CVE-2020-8844
    38İzleyin

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.6.0.25114.

    YüksekCVSS 7,8İstismar yokEPSS %23

    foxitsoftware · reader14 Şub 2020

  • CVE-2020-8845
    37İzleyin

    This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114.

    YüksekCVSS 7,8İstismar yokEPSS %19

    foxitsoftware · reader14 Şub 2020

  • CVE-2020-8846
    37İzleyin

    This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114.

    YüksekCVSS 7,8İstismar yokEPSS %19

    foxitsoftware · reader14 Şub 2020

  • CVE-2020-8856
    37İzleyin

    This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25608.

    YüksekCVSS 7,8İstismar yokEPSS %19

    foxitsoftware · reader14 Şub 2020

  • CVE-2013-4211
    60Bu hafta

    A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, which could let a remo

    KritikCVSS 9,8SilahlaştırılmışEPSS %70

    openx · openx14 Şub 2020

  • CVE-2020-8518
    61Bu hafta

    Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code execution.

    KritikCVSS 9,8SilahlaştırılmışEPSS %71

    horde · groupware17 Şub 2020

  • CVE-2015-6922
    64Bu hafta

    Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before 9.1.0.9 does not pro

    KritikCVSS 9,8SilahlaştırılmışEPSS %82

    kaseya · virtual system administrator17 Şub 2020

  • CVE-2014-7236
    53Planlayın

    Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the de

    KritikCVSS 9,1SilahlaştırılmışEPSS %55

    twiki · twiki17 Şub 2020

  • CVE-2020-8010
    54Planlayın

    CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the r

    KritikCVSS 9,8SilahlaştırılmışEPSS %50

    broadcom · unified infrastructure management18 Şub 2020

  • CVE-2020-8012
    62Bu hafta

    CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (c

    KritikCVSS 9,8SilahlaştırılmışEPSS %77

    broadcom · unified infrastructure management18 Şub 2020

  • CVE-2013-2679
    30İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Cisco Linksys E4200 router with firmware 1.0.05 build 7 allow remote attackers to inj

    OrtaCVSS 6,1Kavram kanıtıEPSS %19

    belkin · linksys e4200 firmware18 Şub 2020

  • CVE-2020-7796
    94Hemen

    Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %84

    synacor · zimbra collaboration suite18 Şub 2020

  • CVE-2014-9609
    25İzleyin

    Directory traversal vulnerability in webadmin/reporter/view_server_log.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before

    OrtaCVSS 5,3Kavram kanıtıEPSS %12

    netsweeper · netsweeper19 Şub 2020

  • CVE-2014-9614
    60Bu hafta

    The Web Panel in Netsweeper before 4.0.5 has a default password of branding for the branding account, which makes it easier for remote attac

    KritikCVSS 9,8Kavram kanıtıEPSS %68

    netsweeper · netsweeper19 Şub 2020

  • CVE-2020-3153
    64Bu hafta

    Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %28

    cisco · anyconnect secure mobility client19 Şub 2020

  • CVE-2012-5362
    34İzleyin

    The IPv6 implementation in Microsoft Windows 7 and earlier allows remote attackers to cause a denial of service via a flood of ICMPv6 Neighb

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · windows 720 Şub 2020

  • CVE-2012-5364
    34İzleyin

    The IPv6 implementation in Microsoft Windows 7 and earlier allows remote attackers to cause a denial of service via a flood of ICMPv6 Router

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · windows 720 Şub 2020

  • CVE-2020-9273
    39İzleyin

    In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel.

    YüksekCVSS 8,8Kavram kanıtıEPSS %12

    proftpd · proftpd20 Şub 2020

  • CVE-2014-4650
    46Planlayın

    The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which al

    KritikCVSS 9,8Kavram kanıtıEPSS %24

    python · python20 Şub 2020

  • CVE-2014-4019
    34İzleyin

    ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, whi

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    zte · zxv10 w300 firmware20 Şub 2020

  • CVE-2020-9283
    36İzleyin

    golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto

    YüksekCVSS 7,5Kavram kanıtıEPSS %20

    golang · package ssh20 Şub 2020

  • CVE-2020-9015
    44Planlayın

    Arista DCS-7050QX-32S-R 4.20.9M, DCS-7050CX3-32S-R 4.20.11M, and DCS-7280SRAM-48C6-R 4.22.0.1F devices (and possibly other products) allow a

    KritikCVSS 9,8SilahlaştırılmışEPSS %16

    arista · dcs-7050qx-32s-r firmware20 Şub 2020

  • CVE-2020-8862
    39İzleyin

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC0

    YüksekCVSS 8,8İstismar yokEPSS %13

    dlink · dap-2610 firmware21 Şub 2020

  • CVE-2020-8813
    57Planlayın

    graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest

    YüksekCVSS 8,8Kavram kanıtıEPSS %73

    cacti · cacti21 Şub 2020

  • CVE-2020-4210
    44Planlayın

    IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system.

    KritikCVSS 9,8İstismar yokEPSS %15

    ibm · spectrum protect24 Şub 2020

  • CVE-2020-4211
    60Bu hafta

    IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system.

    KritikCVSS 9,8İstismar yokEPSS %71

    ibm · spectrum protect24 Şub 2020

  • CVE-2020-4212
    43Planlayın

    IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system.

    KritikCVSS 9,8İstismar yokEPSS %14

    ibm · spectrum protect24 Şub 2020