CVE-2020-8028 17 Sep 2020
A Improper Access Control vulnerability in the configuration of salt of SUSE Linux Enterprise Module for SUSE Manager Server 4.1, SUSE Manager Proxy 4... Read more ➔
CVE-2020-10930 28 Jul 2020
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 ro... Read more ➔
CVE-2020-4062 22 Jun 2020
In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with... Read more ➔
CVE-2019-16114 (v3: 9.8) 9 Sep 2019
In ATutor 2.2.4, an unauthenticated attacker can change the application settings and force it to use his crafted database, which allows him to gain ac... Read more ➔
CVE-2019-15895 (v3: 7.5) 9 Sep 2019
search-exclude.php in the "Search Exclude" plugin before 1.2.4 for WordPress allows unauthenticated options changes. Read more ➔
CVE-2019-9854 (v3: 7.8) 6 Sep 2019
LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-... Read more ➔
CVE-2019-13656 (v3: 9.8) 6 Sep 2019
An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11.3.5, 11.3.6 allows a remote at... Read more ➔
CVE-2019-11380 (v3: 7.5) 5 Sep 2019
The master-password feature in the ES File Explorer File Manager application 4.2.0.1.3 for Android can be bypassed via a com.estrongs.android.pop.ftp.... Read more ➔
CVE-2019-13188 (v3: 9.8) 5 Sep 2019
In Knowage through 6.1.1, an unauthenticated user can bypass access controls and access the entire application. Read more ➔
CVE-2019-15718 (v3: 5.5) 4 Sep 2019
In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance)... Read more ➔
CVE-2019-15043 (v3: 7.5) 3 Sep 2019
In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack aga... Read more ➔
CVE-2018-15513 (v3: 5.3) 30 Aug 2019
Log viewer in totemomail 6.0.0 build 570 allows access to sessionIDs of high privileged users by leveraging access to a read-only auditor role. Read more ➔
CVE-2018-21007 (v3: 9.8) 29 Aug 2019
The woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct access to supportive xl folders inside uploads. Read more ➔
CVE-2019-11061 (v3: 8.1) 29 Aug 2019
A broken access control vulnerability in HG100 firmware versions up to 4.00.06 allows an attacker in the same local area network to control IoT device... Read more ➔
CVE-2019-11063 (v3: 8.8) 29 Aug 2019
A broken access control vulnerability in SmartHome app (Android versions up to 3.0.42_190515, ios versions up to 2.0.22) allows an attacker in the sam... Read more ➔
CVE-2019-13405 (v3: 9.8) 29 Aug 2019
A broken access control vulnerability found in Advan VD-1 firmware version 230 leads to insecure ADB service. An attacker can send a POST request to c... Read more ➔
CVE-2019-13406 (v3: 7.5) 29 Aug 2019
A broken access control vulnerability found in Advan VD-1 firmware versions up to 230. An attacker can send a POST request to cgibin/ApkUpload.cgi to... Read more ➔
CVE-2019-13264 (v3: 8.8) 27 Aug 2019
D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device.... Read more ➔
CVE-2019-13265 (v3: 8.8) 27 Aug 2019
D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device.... Read more ➔
CVE-2019-13271 (v3: 8.8) 27 Aug 2019
Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device.... Read more ➔
CVE-2019-15648 (v3: 6.5) 27 Aug 2019
The insert-or-embed-articulate-content-into-wordpress plugin before 4.29991 for WordPress has insufficient restrictions on deleting or renaming by a S... Read more ➔
CVE-2019-12532 (v3: 7.8) 26 Aug 2019
Improper access control in the Insyde software tools may allow an authenticated user to potentially enable escalation of privilege, or information dis... Read more ➔