VYPR

CVEs

130,153 total · page 1941 of 2,604

AllCriticalHighKEV
  • CVE-2021-25769HigFeb 3, 2021
    Jetbrains
    Youtrack
    risk 0.49cvss 7.5epss 0.02

    In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments.

  • CVE-2021-25765HigFeb 3, 2021
    Jetbrains
    Youtrack
    risk 0.57cvss 8.8epss 0.01

    In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible.

  • CVE-2021-25758HigFeb 3, 2021
    Jetbrains
    Intellij Idea
    risk 0.51cvss 7.8epss 0.01

    In JetBrains IntelliJ IDEA before 2020.3, potentially insecure deserialization of the workspace model could lead to local code execution.

  • CVE-2020-35667HigFeb 3, 2021
    Jetbrains
    Teamcity
    risk 0.49cvss 7.5epss 0.01

    JetBrains TeamCity Plugin before 2020.2.85695 SSRF. Vulnerability that could potentially expose user credentials.

  • CVE-2020-2506HigKEVFeb 3, 2021
    Qnap
    Helpdesk
    risk 0.60cvss 7.3epss 0.02

    The vulnerability have been reported to affect earlier versions of QTS. If exploited, this improper access control vulnerability could allow attackers to compromise the security of the software by gaining privileges, or reading sensitive information. This issue affects: QNAP…

  • CVE-2020-28895HigFeb 3, 2021
    Windriver
    Vxworks
    risk 0.48cvss 7.3epss 0.02

    In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.

  • CVE-2020-27222HigFeb 3, 2021
    Eclipse
    Californium
    risk 0.49cvss 7.5epss 0.01

    In Eclipse Californium version 2.3.0 to 2.6.0, the certificate based (x509 and RPK) DTLS handshakes accidentally fails, because the DTLS server side sticks to a wrong internal state. That wrong internal state is set by a previous certificate based DTLS handshake failure with TLS…

  • CVE-2020-29166HigFeb 3, 2021
    PacsOne
    PacsOne Server
    risk 0.49cvss 7.5epss 0.02

    PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file read/manipulation, which can result in remote information disclosure.

  • CVE-2020-29163HigFeb 3, 2021
    PacsOne
    PacsOne Server
    risk 0.57cvss 8.8epss 0.01

    PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by SQL injection.

  • CVE-2021-21294HigFeb 2, 2021
    Http4s
    Http4s
    risk 0.42cvss 7.5epss 0.02

    Http4s (http4s-blaze-server) is a minimal, idiomatic Scala interface for HTTP services. Http4s before versions 0.21.17, 0.22.0-M2, and 1.0.0-M14 have a vulnerability which can lead to a denial-of-service. Blaze-core, a library underlying http4s-blaze-server, accepts connections…

  • CVE-2021-21293HigFeb 2, 2021
    Http4s
    blaze
    risk 0.42cvss 7.5epss 0.02

    blaze is a Scala library for building asynchronous pipelines, with a focus on network IO. All servers running blaze-core before version 0.14.15 are affected by a vulnerability in which unbounded connection acceptance leads to file handle exhaustion. Blaze, accepts connections…

  • CVE-2020-8672HigFeb 2, 2021
    Intel
    BIOS
    risk 0.51cvss 7.8epss 0.00

    Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 Series Processors may allow an unauthenticated user to potentially enable elevation of privilege or denial of service via local access.

  • CVE-2020-1910HigFeb 2, 2021
    Whatsapp
    Whatsapp
    risk 0.51cvss 7.8epss 0.05

    A missing bounds check in WhatsApp for Android prior to v2.21.1.13 and WhatsApp Business for Android prior to v2.21.1.13 could have allowed out-of-bounds read and write if a user applied specific image filters to a specially crafted image and sent the resulting image.

  • CVE-2020-14255HigFeb 2, 2021
    HCLTech
    Digital Experience
    risk 0.49cvss 7.5epss 0.01

    HCL Digital Experience 9.5 containers include vulnerabilities that could expose sensitive data to unauthorized parties via crafted requests. These affect containers only. These do not affect traditional on-premise installations.

  • CVE-2021-23271HigFeb 2, 2021
    TIBCO Software
    EBX
    risk 0.52cvss 8.0epss 0.01

    The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Stored Cross Site Scripting (XSS) attack on the affected system. Affected releases are TIBCO…

  • CVE-2021-21289HigFeb 2, 2021
    Mechanize Project
    Mechanize
    risk 0.41cvss 7.4epss 0.04

    Mechanize is an open-source ruby library that makes automated web interaction easy. In Mechanize from version 2.0.0 and before version 2.7.7 there is a command injection vulnerability. Affected versions of mechanize allow for OS commands to be injected using several classes'…

  • CVE-2019-25018HigFeb 2, 2021
    Mit
    Krb5 Appl
    risk 0.49cvss 7.5epss 0.02

    In the rcp client in MIT krb5-appl through 1.0.3, malicious servers could bypass intended access restrictions via the filename of . or an empty filename, similar to CVE-2018-20685 and CVE-2019-7282. The impact is modifying the permissions of the target directory on the client…

  • CVE-2021-25310HigFeb 2, 2021
    Belkin
    LINKSYS WRT160NL
    risk 0.58cvss 8.8epss 0.05

    The administration web interface on Belkin Linksys WRT160NL 1.0.04.002_US_20130619 devices allows remote authenticated attackers to execute system commands with root privileges via shell metacharacters in the ui_language POST parameter to the apply.cgi form endpoint. This occurs…

  • CVE-2020-28495HigFeb 2, 2021
    Totaljs
    Totaljs
    risk 0.41cvss 7.3epss 0.04

    This affects the package total.js before 3.4.7. The set function can be used to set a value into the object according to the path. However the keys of the path being set are not properly sanitized, leading to a prototype pollution vulnerability. The impact depends on the…

  • CVE-2020-28494HigFeb 2, 2021
    Totaljs
    Totaljs
    risk 0.49cvss 8.6epss 0.02

    This affects the package total.js before 3.4.7. The issue occurs in the image.pipe and image.stream functions. The type parameter is used to build the command that is then executed using child_process.spawn. The issue occurs because child_process.spawn is called with the option…

  • CVE-2020-24335HigFeb 2, 2021
    uIP
    uIP
    risk 0.49cvss 7.5epss 0.03

    An issue was discovered in uIP through 1.0, as used in Contiki and Contiki-NG. Domain name parsing lacks bounds checks, allowing an attacker to corrupt memory with crafted DNS packets.

  • CVE-2020-25036HigFeb 2, 2021
    Ucopia
    Wi-Fi appliances
    risk 0.57cvss 8.8epss 0.02

    UCOPIA Wi-Fi appliances 6.0.5 allow authenticated remote attackers to escape the restricted administration shell CLI, and access a shell with admin user rights, via an unprotected less command.

  • CVE-2020-25037HigFeb 2, 2021
    Ucopia
    Wi-Fi appliances
    risk 0.53cvss 8.2epss 0.01

    UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with admin user privileges via an escape from a restricted command.

  • CVE-2019-20471HigFeb 1, 2021
    star
    star
    risk 0.51cvss 7.8epss 0.00

    An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. When using the device at initial setup, a default password is used (123456) for administrative purposes. There is no prompt to change this password. Note that this password can be used in…

  • CVE-2019-20470HigFeb 1, 2021
    star
    star
    risk 0.49cvss 7.5epss 0.02

    An issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. It performs actions based on certain SMS commands. This can be used to set up a voice communication channel from the watch to any telephone number, initiated by sending a specific SMS and using the…

  • CVE-2021-21287HigFeb 1, 2021
    Minio
    Minio
    risk 0.52cvss 7.7epss 0.24

    MinIO is a High Performance Object Storage released under Apache License v2.0. In MinIO before version RELEASE.2021-01-30T00-20-58Z there is a server-side request forgery vulnerability. The target application may have functionality for importing data from a URL, publishing data…

  • CVE-2020-20290HigFeb 1, 2021
    YCCMS
    YCCMS
    risk 0.49cvss 7.5epss 0.01

    Directory traversal vulnerability in the yccms 3.3 project. The delete, deletesite, and deleteAll functions' improper judgment of the request parameters, triggers a directory traversal vulnerability.

  • CVE-2021-3283HigFeb 1, 2021
    Hashicorp
    Nomad
    risk 0.49cvss 7.5epss 0.01

    HashiCorp Nomad and Nomad Enterprise up to 0.12.9 exec and java task drivers can access processes associated with other tasks on the same node. Fixed in 0.12.10, and 1.0.3.

  • CVE-2021-3282HigFeb 1, 2021
    Hashicorp
    Vault
    risk 0.42cvss 7.5epss 0.01

    HashiCorp Vault Enterprise 1.6.0 & 1.6.1 allowed the `remove-peer` raft operator command to be executed against DR secondaries without authentication. Fixed in 1.6.2.

  • CVE-2021-21286HigFeb 1, 2021
    AVideo Platform
    AVideo Platform
    risk 0.50cvss 7.7epss 0.01

    AVideo Platform is an open-source Audio and Video platform. It is similar to a self-hosted YouTube. In AVideo Platform before version 10.2 there is an authorization bypass vulnerability which enables an ordinary user to get admin control. This is fixed in version 10.2. All…

  • CVE-2020-28426HigFeb 1, 2021
    Kill Process On Port Project
    Kill Process On Port
    risk 0.48cvss 7.3epss 0.02

    All versions of package kill-process-on-port are vulnerable to Command Injection via a.getProcessPortId.

  • CVE-2021-21277HigFeb 1, 2021
    Peerigon
    Angular Expressions
    risk 0.48cvss 8.5epss 0.03

    angular-expressions is "angular's nicest part extracted as a standalone module for the browser and node". In angular-expressions before version 1.1.2 there is a vulnerability which allows Remote Code Execution if you call "expressions.compile(userControlledInput)" where…

  • CVE-2020-24271HigFeb 1, 2021
    Easycms
    Easycms
    risk 0.57cvss 8.8epss 0.01

    A CSRF vulnerability was discovered in EasyCMS v1.6 that can add an admin account through index.php?s=/admin/rbacuser/insert/navTabId/rbacuser/callbackType/closeCurrent, then post username=***&password=***.

  • CVE-2021-3348HigFeb 1, 2021
    Linux
    Kernel
    risk 0.46cvss 7.0epss 0.00

    nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup, aka CID-b98e762e3d71.

  • CVE-2020-15834HigFeb 1, 2021
    MoFi Network
    MOFI4500-4GXeLTE-V2
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The wireless network password is exposed in a QR encoded picture that an unauthenticated adversary can download via the web-management interface.

  • CVE-2020-15832HigFeb 1, 2021
    MoFi Network
    MOFI4500-4GXeLTE-V2
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The poof.cgi script contains undocumented code that provides the ability to remotely reboot the device. An adversary with the private key (but not the root password) can remotely reboot the device.

  • CVE-2020-13860HigFeb 1, 2021
    MoFi Network
    MOFI4500-4GXeLTE-V2
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. The one-time password algorithm for the undocumented system account mofidev generates a predictable six-digit password.

  • CVE-2020-13857HigFeb 1, 2021
    MoFi Network
    MOFI4500-4GXeLTE-V2
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They can be rebooted by sending an unauthenticated poof.cgi HTTP GET request.

  • CVE-2020-13856HigFeb 1, 2021
    MoFi Network
    MOFI4500-4GXeLTE-V2
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. Authentication is not required to download the support file that contains sensitive information such as cleartext credentials and password hashes.

  • CVE-2021-23329HigJan 31, 2021
    Getadigital
    Nested Object Assign
    risk 0.49cvss 7.5epss 0.02

    The package nested-object-assign before 1.0.4 are vulnerable to Prototype Pollution via the default function, as demonstrated by running the PoC below.

  • CVE-2020-14418HigJan 30, 2021
    Madshi
    Madcodehook
    risk 0.46cvss 7.0epss 0.00

    A TOCTOU vulnerability exists in madCodeHook before 2020-07-16 that allows local attackers to elevate their privileges to SYSTEM. This occurs because path redirection can occur via vectors involving directory junctions.

  • CVE-2021-25646HigJan 29, 2021
    Apache
    Druid
    risk 0.68cvss 8.8epss 0.99

    Apache Druid includes the ability to execute user-provided JavaScript code embedded in various types of requests. This functionality is intended for use in high-trust environments, and is disabled by default. However, in Druid 0.20.0 and earlier, it is possible for an…

  • CVE-2021-25138HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25137HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25136HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25135HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25134HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25133HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25132HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25131HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…