VYPR

CVEs

410,416 total · page 5268 of 8,209

AllCriticalHighKEV
  • CVE-2020-26086MedNov 6, 2020
    Cisco Systems, Inc.
    Telepresence Collaboration Endpoint
    risk 0.28cvss 4.3epss 0.01

    A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an authenticated, remote attacker to gain access to sensitive information on an affected device. The vulnerability is due to improper storage of sensitive…

  • CVE-2020-26084MedNov 6, 2020
    Cisco Systems, Inc.
    Edge Fog Fabric
    risk 0.42cvss 6.5epss 0.01

    A vulnerability in the REST API of Cisco Edge Fog Fabric could allow an authenticated, remote attacker to access files outside of their authorization sphere on an affected device. The vulnerability is due to incorrect authorization enforcement on an affected system. An attacker…

  • CVE-2020-26083MedNov 6, 2020
    Cisco Systems, Inc.
    Identity Services Engine Software
    risk 0.31cvss 4.8epss 0.01

    A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability exists…

  • CVE-2020-26214CriNov 6, 2020
    Alerta Project
    Alerta
    risk 0.57cvss 9.1epss 0.66

    In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP as the authorization provider. Only deployments where LDAP servers are configured to allow unauthenticated authentication…

  • CVE-2017-18926HigNov 6, 2020
    Raptor
    Raptor RDF Syntax Library
    risk 0.46cvss 7.1epss 0.03

    raptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows (sometimes seen in raptor_qname_format_as_xml).

  • CVE-2020-8577MedNov 6, 2020
    SANtricity
    SANtricity OS Controller Software
    risk 0.38cvss 5.9epss 0.01

    SANtricity OS Controller Software versions 11.50.1 and higher are susceptible to a vulnerability which could allow an attacker to discover sensitive information by intercepting its transmission within an https session.

  • CVE-2020-5794HigNov 6, 2020
    Tenable
    Nessus Network Monitor
    risk 0.51cvss 7.8epss 0.00

    A vulnerability in Nessus Network Monitor versions 5.11.0, 5.11.1, and 5.12.0 for Windows could allow an authenticated local attacker to execute arbitrary code by copying user-supplied files to a specially constructed path in a specifically named user directory. The attacker…

  • CVE-2020-26213MedNov 6, 2020
    Teler Project
    Teler
    risk 0.31cvss 5.9epss 0.01

    In teler before version 0.0.1, if you run teler inside a Docker container and encounter `errors.Exit` function, it will cause denial-of-service (`SIGSEGV`) because it doesn't get process ID and process group ID of teler properly to kills. The issue is patched in teler 0.0.1 and…

  • CVE-2020-25174HigNov 6, 2020
    Bbraun
    OnlineSuite
    risk 0.51cvss 7.8epss 0.00

    A DLL hijacking vulnerability in the B. Braun OnlineSuite Version AP 3.0 and earlier allows local attackers to execute code on the system as a high privileged user.

  • CVE-2020-25172CriNov 6, 2020
    Bbraun
    OnlineSuite
    risk 0.64cvss 9.8epss 0.02

    A relative path traversal attack in the B. Braun OnlineSuite Version AP 3.0 and earlier allows unauthenticated attackers to upload or download arbitrary files.

  • CVE-2020-25170HigNov 6, 2020
    Bbraun
    OnlineSuite
    risk 0.51cvss 7.8epss 0.01

    An Excel Macro Injection vulnerability exists in the export feature in the B. Braun OnlineSuite Version AP 3.0 and earlier via multiple input fields that are mishandled in an Excel export.

  • CVE-2020-8580HigNov 6, 2020
    NetApp
    SANtricity OS Controller Software
    risk 0.49cvss 7.5epss 0.01

    SANtricity OS Controller Software versions 11.30 and higher are susceptible to a vulnerability which allows an unauthenticated attacker with access to the system to cause a Denial of Service (DoS).

  • CVE-2020-7198HigNov 6, 2020
    HPE
    OneView
    risk 0.57cvss 8.8epss 0.02

    There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2.

  • CVE-2020-5795MedNov 6, 2020
    TP-Link
    Archer A7
    risk 0.40cvss 6.2epss 0.01

    UNIX Symbolic Link (Symlink) Following in TP-Link Archer A7(US)_V5_200721 allows an authenticated admin user, with physical access and network access, to execute arbitrary code after plugging a crafted USB drive into the router.

  • CVE-2020-4484MedNov 6, 2020
    IBM
    Urbancode Deploy
    risk 0.28cvss 4.3epss 0.01

    IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could disclose sensitive information to an authenticated user that could be used in further attacks against the system. IBM X-Force ID: 181858.

  • CVE-2020-4483MedNov 6, 2020
    IBM
    Urbancode Deploy
    risk 0.28cvss 4.3epss 0.01

    IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force…

  • CVE-2020-4482MedNov 6, 2020
    IBM
    Urbancode Deploy
    risk 0.42cvss 6.5epss 0.01

    IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could allow an authenticated user to bypass security. A user with access to a snapshot could apply unauthorized additional statuses via direct rest calls. IBM X-Force ID: 181856.

  • CVE-2020-27589HigNov 6, 2020
    Lm Sys
    hub-rest-api-python
    risk 0.42cvss 7.5epss 0.01

    Synopsys hub-rest-api-python (aka blackduck on PyPI) version 0.0.25 - 0.0.52 does not validate SSL certificates in certain cases.

  • CVE-2020-27196HigNov 6, 2020
    Lightbend
    Play Framework
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered in PlayJava in Play Framework 2.6.0 through 2.8.2. The body parsing of HTTP requests eagerly parses a payload given a Content-Type header. A deep JSON structure sent to a valid POST endpoint (that may or may not expect JSON payloads) causes a…

  • CVE-2020-26883HigNov 6, 2020
    Lightbend
    Play Framework
    risk 0.49cvss 7.5epss 0.01

    In Play Framework 2.6.0 through 2.8.2, stack consumption can occur because of unbounded recursion during parsing of crafted JSON documents.

  • CVE-2020-26882HigNov 6, 2020
    Lightbend
    Play Framework
    risk 0.49cvss 7.5epss 0.01

    In Play Framework 2.6.0 through 2.8.2, data amplification can occur when an application accepts multipart/form-data JSON input.

  • CVE-2020-10292HigNov 6, 2020
    Visual Components
    Visual Components
    risk 0.53cvss 8.2epss 0.02

    Visual Components (owned by KUKA) is a robotic simulator that allows simulating factories and robots in order toimprove planning and decision-making processes. Visual Components software requires a special license which can beobtained from a network license server. The network…

  • CVE-2020-10291HigNov 6, 2020
    Visual Components
    Visual Components
    risk 0.49cvss 7.5epss 0.01

    Visual Components (owned by KUKA) is a robotic simulator that allows simulating factories and robots in order toimprove planning and decision-making processes. Visual Components software requires a special license which can beobtained from a network license server. The network…

  • CVE-2020-28196HigNov 6, 2020
    Mit
    Kerberos 5
    risk 0.49cvss 7.5epss 0.04

    MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.

  • CVE-2020-27617MedNov 6, 2020
    QEMU
    Qemu
    risk 0.42cvss 6.5epss 0.03

    eth_get_gso_type in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure. A guest can crash the QEMU process via packet data that lacks a valid Layer 3 protocol.

  • CVE-2020-27616MedNov 6, 2020
    QEMU
    Qemu
    risk 0.42cvss 6.5epss 0.03

    ati_2d_blt in hw/display/ati_2d.c in QEMU 4.2.1 can encounter an outside-limits situation in a calculation. A guest can crash the QEMU process.

  • CVE-2020-27152MedNov 6, 2020
    Linux
    Kernel
    risk 0.36cvss 5.5epss 0.01

    An issue was discovered in ioapic_lazy_update_eoi in arch/x86/kvm/ioapic.c in the Linux kernel before 5.9.2. It has an infinite loop related to improper interaction between a resampler and edge triggering, aka CID-77377064c3a9.

  • CVE-2020-26892CriNov 6, 2020
    Fedoraproject
    Fedora
    risk 0.57cvss 9.8epss 0.02

    The JWT library in NATS nats-server before 2.1.9 has Incorrect Access Control because of how expired credentials are handled.

  • CVE-2020-26521HigNov 6, 2020
    Fedoraproject
    Fedora
    risk 0.42cvss 7.5epss 0.02

    The JWT library in NATS nats-server before 2.1.9 allows a denial of service (a nil dereference in Go code).

  • CVE-2020-25592CriNov 6, 2020
    Saltstack
    Salt
    risk 0.64cvss 9.8epss 0.58

    In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH.

  • CVE-2020-17490MedNov 6, 2020
    Saltstack
    Salt
    risk 0.36cvss 5.5epss 0.00

    The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions.

  • CVE-2020-16846CriKEVNov 6, 2020
    Saltstack
    Salt
    risk 0.80cvss 9.8epss 1.00

    An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.

  • CVE-2020-28250CriNov 6, 2020
    Cellinx
    Nvt Web Server
    risk 0.64cvss 9.8epss 0.03

    Cellinx NVT Web Server 5.0.0.014b.test 2019-09-05 allows a remote user to run commands as root via SetFileContent.cgi because authentication is on the client side.

  • CVE-2020-28249MedNov 6, 2020
    Joplin Project
    Joplin
    risk 0.36cvss 6.1epss 0.03

    Joplin 1.2.6 for Desktop allows XSS via a LINK element in a note.

  • CVE-2020-28242MedNov 6, 2020
    Asterisk
    Certified Asterisk
    risk 0.42cvss 6.5epss 0.02

    An issue was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before 16.14.1, 17.x before 17.8.1, and 18.x before 18.0.1 and Certified Asterisk before 16.8-cert5. If Asterisk is challenged on an outbound INVITE and the nonce is changed in each response, Asterisk will…

  • CVE-2020-28241MedNov 6, 2020
    maxmind
    libmaxminddb
    risk 0.42cvss 6.5epss 0.02

    libmaxminddb before 1.4.3 has a heap-based buffer over-read in dump_entry_data_list in maxminddb.c.

  • CVE-2020-5667MedNov 6, 2020
    Studyplus
    Studyplus App for Android
    risk 0.36cvss 5.5epss 0.00

    Studyplus App for Android v6.3.7 and earlier and Studyplus App for iOS v8.29.0 and earlier use a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app.

  • CVE-2020-5649HigNov 6, 2020
    Mitsubishielectric
    Coreos
    risk 0.49cvss 7.5epss 0.04

    Resource management error vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QLBDE CoreOS version "05.65.00.BD" and…

  • CVE-2020-5648CriNov 6, 2020
    Mitsubishielectric
    Coreos
    risk 0.64cvss 9.8epss 0.03

    Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version "05.65.00.BD" and…

  • CVE-2020-5647CriNov 6, 2020
    Mitsubishielectric
    Coreos
    risk 0.64cvss 9.8epss 0.04

    Improper access control vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version ’05.65.00.BD’ and earlier, GT1450-QMBDE CoreOS version ’05.65.00.BD’ and earlier, GT1450-QLBDE CoreOS version ’05.65.00.BD’…

  • CVE-2020-5646HigNov 6, 2020
    Mitsubishielectric
    Coreos
    risk 0.49cvss 7.5epss 0.04

    NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QLBDE CoreOS version "05.65.00.BD" and…

  • CVE-2020-5645HigNov 6, 2020
    Mitsubishielectric
    Coreos
    risk 0.49cvss 7.5epss 0.04

    Session fixation vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QLBDE CoreOS version "05.65.00.BD" and earlier,…

  • CVE-2020-5644CriNov 6, 2020
    Mitsubishielectric
    Coreos
    risk 0.64cvss 9.8epss 0.05

    Buffer overflow vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QLBDE CoreOS version "05.65.00.BD" and earlier,…

  • CVE-2020-5643MedNov 6, 2020
    Cybozu
    Garoon
    risk 0.42cvss 6.5epss 0.02

    Improper input validation vulnerability in Cybozu Garoon 5.0.0 to 5.0.2 allows a remote authenticated attacker to delete some data of the bulletin board via unspecified vector.

  • CVE-2020-27347HigNov 6, 2020
    Tmux
    tmux
    risk 0.57cvss 8.8epss 0.01

    In tmux before version 3.1c the function input_csi_dispatch_sgr_colon() in file input.c contained a stack-based buffer-overflow that can be exploited by terminal output.

  • CVE-2020-15708CriNov 6, 2020
    Ubuntu
    libvirt
    risk 0.60cvss 9.3epss 0.00

    Ubuntu's packaging of libvirt in 20.04 LTS created a control socket with world read and write permissions. An attacker could use this to overwrite arbitrary files or execute arbitrary code.

  • CVE-2018-16936Nov 6, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2018-16935Nov 6, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2018-16934Nov 6, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2018-16933Nov 6, 2020
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none