Published Advisories
The following is a list of all publicly disclosed vulnerabilities discovered by TrendAI™ Zero Day Initiative™ (ZDI) researchers. While the affected vendor is working on a patch for these vulnerabilities, TrendAI™ customers are protected from exploitation by security filters delivered ahead of public disclosure.
All security vulnerabilities that are acquired by TrendAI™ ZDI are handled according to TrendAI™ ZDI's disclosure policy. Once the affected vendor patches the vulnerability, we publish an accompanying security advisory that describes the issue, including links to the vendor's fixes.
Published
Upcoming
| ZDI ID | ZDI CAN | Vendor/Product | CVE | CVSS | Published | Updated | ||
|---|---|---|---|---|---|---|---|---|
ZDI-CAN-11257 |
Qognify |
CVE-2020-27868 |
9.8 |
2020-12-29 |
2021-03-04 |
Qognify Ocularis EventCoordinator ConnectedChannel_GotMessage Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||
ZDI-CAN-11486 |
Microsoft |
6.6 |
2020-12-21 |
2021-02-03 |
(0Day) Microsoft 3D Builder GLB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11355 |
NETGEAR |
CVE-2020-27866 |
8.8 |
2020-12-18 |
NETGEAR Multiple Routers mini_httpd Authentication Bypass Vulnerability |
|||
ZDI-CAN-11695 |
VMware |
CVE-2020-3999 |
6.5 |
2020-12-18 |
VMware Workstation SetGuestInfo Null Pointer Dereference Denial-of-Service Vulnerability |
|||
ZDI-CAN-11847 |
Hewlett Packard Enterprise |
CVE-2020-7200 |
9.8 |
2020-12-18 |
Hewlett Packard Enterprise Systems Insight Manager AMF Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-12385 |
Western Digital |
CVE-2020-28970 |
0.0 |
2020-12-16 |
(Pwn2Own) Western Digital MyCloud PR4100 nasAdmin Incorrect Authorization Authentication Bypass Vulnerability |
|||
ZDI-CAN-12327 |
Western Digital |
CVE-2020-28971 |
5.4 |
2020-12-15 |
(Pwn2Own) Western Digital MyCloud PR4100 nasAdmin Authentication Bypass Vulnerability |
|||
ZDI-CAN-12465 |
Western Digital |
CVE-2020-29563 |
9.8 |
2020-12-15 |
(Pwn2Own) Western Digital MyCloud PR4100 nasAdmin Incorrect Authorization Authentication Bypass Vulnerability |
|||
ZDI-CAN-12214 |
Western Digital |
CVE-2020-28940 |
5.4 |
2020-12-15 |
(Pwn2Own) Western Digital MyCloud PR4100 nasAdmin Authentication Bypass Vulnerability |
|||
ZDI-CAN-11083 |
Eaton |
7.8 |
2020-12-15 |
(0Day) Eaton EASYsoft E70 File Parsing Type Confusion Remote Code Execution Vulnerability |
||||
ZDI-CAN-11082 |
Eaton |
7.8 |
2020-12-15 |
(0Day) Eaton EASYsoft E70 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
||||
ZDI-CAN-11080 |
Eaton |
7.8 |
2020-12-15 |
(0Day) Eaton EASYsoft E70 File Parsing Type Confusion Remote Code Execution Vulnerability |
||||
ZDI-CAN-11078 |
Eaton |
7.8 |
2020-12-15 |
(0Day) Eaton EASYsoft E70 File Parsing Type Confusion Remote Code Execution Vulnerability |
||||
ZDI-CAN-10905 |
Linux |
8.8 |
2020-12-15 |
(0Day) Linux Kernel eBPF Improper Input Validation Privilege Escalation Vulnerability |
||||
ZDI-CAN-11115 |
LibTIFF |
3.3 |
2020-12-15 |
(0Day) LibTIFF tiff2pdf Converter Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-11359 |
D-Link |
8.8 |
2020-12-15 |
(0Day) D-Link DCS-960L HTTP Authorization Header Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-11352 |
D-Link |
8.8 |
2020-12-15 |
2021-09-27 |
(0Day) D-Link DCS-960L HNAP LoginPassword Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability |
|||
ZDI-CAN-11366 |
D-Link |
8.8 |
2020-12-15 |
(0Day) D-Link DCS-960L HNAP Login Cookie Format String Remote Code Execution Vulnerability |
||||
ZDI-CAN-11360 |
D-Link |
8.8 |
2020-12-15 |
2021-09-27 |
(0Day) D-Link DCS-960L HNAP Cookie Format String Remote Code Execution Vulnerability |
|||
ZDI-CAN-11350 |
Microsoft |
CVE-2021-1648 |
2.5 |
2020-12-15 |
(0Day) Microsoft Windows splwow64 Untrusted Pointer Dereference Information Disclosure Vulnerability |
|||
ZDI-CAN-11349 |
Microsoft |
CVE-2021-1648 |
2.5 |
2021-01-08 |
(0Day) Microsoft Windows splwow64 Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11351 |
Microsoft |
CVE-2021-1648 |
7.0 |
2020-12-15 |
(0Day) Microsoft Windows splwow64 Out-Of-Bounds Write Privilege Escalation Vulnerability |
|||
ZDI-CAN-11632 |
FreeBSD |
CVE-2020-7468 |
8.8 |
2020-12-15 |
FreeBSD FTPD Improper Handling of Exceptional Conditions Privilege Escalation Vulnerability |
|||
ZDI-CAN-11076 |
NETGEAR |
CVE-2020-27861 |
8.8 |
2020-12-15 |
NETGEAR Orbi UA_Parser Host Name Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10894 |
D-Link |
CVE-2020-27865 |
8.8 |
2020-12-15 |
D-Link DAP-1860 uhttpd Authentication Bypass Remote Code Execution Vulnerability |
|||
ZDI-CAN-10880 |
D-Link |
CVE-2020-27864 |
8.8 |
2020-12-15 |
D-Link DAP-1860 HNAP Authorization Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10912 |
D-Link |
CVE-2020-27863 |
6.5 |
2020-12-15 |
2021-09-27 |
D-Link Multiple Routers dhttpd Authentication Bypass Vulnerability |
||
ZDI-CAN-10911 |
D-Link |
CVE-2020-27862 |
8.8 |
2020-12-15 |
2021-09-27 |
D-Link Multiple Routers dhttpd Command Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-11752 |
Microsoft |
CVE-2020-17128 |
7.0 |
2020-12-11 |
Microsoft Excel XLS File Parsing Integer Signedness Remote Code Execution Vulnerability |
|||
ZDI-CAN-11888 |
Microsoft |
CVE-2020-17125 |
7.8 |
2020-12-11 |
Microsoft Excel XLS File Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-11653 |
NETGEAR |
CVE-2020-27867 |
6.8 |
2020-12-21 |
2020-12-21 |
NETGEAR Multiple Routers mini_httpd Command Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-11887 |
Microsoft |
CVE-2020-17119 |
2.5 |
2020-12-11 |
Microsoft Outlook MSG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11839 |
X.Org |
CVE-2020-25712 |
7.8 |
2020-12-09 |
X.Org Server XkbSetDeviceInfo Heap-based Buffer Overflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-11572 |
X.Org |
CVE-2020-14360 |
7.8 |
2020-12-09 |
X.Org Server XkbSetMap Out-Of-Bounds Access Privilege Escalation Vulnerability |
|||
ZDI-CAN-11574 |
X.Org |
CVE-2020-14362 |
7.8 |
2020-12-09 |
X.Org Server XRecordRegisterClients Integer Underflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-11573 |
X.Org |
CVE-2020-14361 |
7.8 |
2020-12-09 |
X.Org Server XkbSelectEvents Integer Underflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-11429 |
X.Org |
CVE-2020-14346 |
7.8 |
2020-12-09 |
X.Org Server XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-11428 |
X.Org |
CVE-2020-14345 |
7.8 |
2020-12-09 |
X.Org Server XkbSetNames Out-Of-Bounds Access Privilege Escalation Vulnerability |
|||
ZDI-CAN-11727 |
Foxit |
CVE-2020-27860 |
7.8 |
2020-12-09 |
Foxit Reader XFA Template Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11894 |
Microsoft |
CVE-2020-17124 |
7.8 |
2020-12-09 |
Microsoft PowerPoint PPTX File Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-11906 |
Microsoft |
CVE-2020-17131 |
8.8 |
2020-12-09 |
Microsoft Chakra LinearScan Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-11873 |
Microsoft |
CVE-2020-17121 |
8.8 |
2020-12-09 |
Microsoft SharePoint Site Import Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-11588 |
Apple |
CVE-2020-9956 |
4.3 |
2020-12-09 |
Apple macOS libFontParser TTF Font Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11307 |
Apple |
CVE-2020-9955 |
4.3 |
2020-12-09 |
Apple macOS KTX Image DecodeRow Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11122 |
Apple |
CVE-2020-10015 |
7.8 |
2020-12-09 |
Apple macOS process_token_BlitLibSetup3D Out-Of-Bounds Access Privilege Escalation Vulnerability |
|||
ZDI-CAN-11123 |
Apple |
CVE-2020-10015 |
7.8 |
2020-12-09 |
Apple macOS process_token_BlitLibSetup2D Out-Of-Bounds Access Privilege Escalation Vulnerability |
|||
ZDI-CAN-11124 |
Apple |
CVE-2020-27907 |
7.8 |
2020-12-09 |
Apple macOS process_token_GenerateMipmaps Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
|||
ZDI-CAN-11828 |
Apple |
CVE-2020-9999 |
7.8 |
2020-12-08 |
Apple macOS CoreText MorxLigatureSubtableBuilder TTF Parsing Out-of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11801 |
Apple |
CVE-2020-27931 |
3.3 |
2020-12-08 |
Apple macOS libFontParser TwOFFStream TTF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11598 |
Apple |
CVE-2020-27952 |
7.8 |
2020-12-08 |
Apple macOS libFontParser TTF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11209 |
Apple |
CVE-2020-27897 |
7.8 |
2020-12-08 |
Apple macOS Kernel Command 0x10007 Out-Of-Bounds Write Privilege Escalation Vulnerability |
|||
ZDI-CAN-11208 |
Apple |
CVE-2020-27897 |
7.8 |
2020-12-08 |
Apple macOS Kernel Command 0x10006 Out-Of-Bounds Write Privilege Escalation Vulnerability |
|||
ZDI-CAN-11207 |
Apple |
CVE-2020-27897 |
7.8 |
2020-12-08 |
Apple macOS Kernel Command 0x10005 Out-Of-Bounds Write Privilege Escalation Vulnerability |
|||
ZDI-CAN-10758 |
Realtek |
8.0 |
2020-12-07 |
(0Day) Realtek RTL8811AU Wi-Fi Driver rtwlane Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-10715 |
Realtek |
8.0 |
2020-12-07 |
(0Day) Realtek RTL8811AU Wi-Fi Driver rtwlanu Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-11267 |
Microsoft |
CVE-2020-0971 |
6.5 |
2020-12-04 |
Microsoft SharePoint DataFormWebPart Server-Side Include Information Disclosure Vulnerability |
|||
ZDI-CAN-11103 |
Arcserve |
CVE-2020-27858 |
7.5 |
2020-12-04 |
Arcserve D2D getNews XML External Entity Processing Information Disclosure Vulnerability |
|||
ZDI-CAN-11507 |
Apple |
CVE-2020-10017 |
7.8 |
2020-12-04 |
Apple macOS AudioCodecs AAC Decoding Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11183 |
Apple |
CVE-2020-10007 |
5.5 |
2020-12-04 |
2024-07-08 |
Apple macOS powerd Uninitialized Memory Information Disclosure Vulnerability |
||
ZDI-CAN-11498 |
Apple |
CVE-2020-9950 |
4.3 |
2020-12-03 |
Apple Safari TextNode Use-After-Free Information Disclosure Vulnerability |
|||
ZDI-CAN-11457 |
Apple |
CVE-2020-9996 |
7.8 |
2020-12-03 |
Apple macOS libnetworkextension ne_filter_protocol_remove_input_handler Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-11235 |
Apple |
CVE-2020-9954 |
7.8 |
2020-12-03 |
Apple macOS AudioCodecs Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11189 |
Apple |
CVE-2020-9889 |
7.8 |
2020-12-03 |
Apple macOS AudioToolboxCore Wave Header Parsing Sign Extension Remote Code Execution Vulnerability |
|||
ZDI-CAN-11125 |
Apple |
CVE-2020-9947 |
8.8 |
2020-12-03 |
Apple Safari RenderObject Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-11210 |
Apple |
CVE-2020-9883 |
3.3 |
2020-12-03 |
Apple macOS CoreGraphics JBIG2Stream Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11575 |
McAfee |
CVE-2020-7335 |
7.0 |
2020-12-01 |
McAfee Total Protection Junction Privilege Escalation Vulnerability |
|||
ZDI-CAN-11583 |
Trend Micro |
CVE-2020-28583 |
5.3 |
2020-11-27 |
Trend Micro OfficeScan Improper Access Control Information Disclosure Vulnerability |
|||
ZDI-CAN-11582 |
Trend Micro |
CVE-2020-28582 |
5.3 |
2020-11-27 |
Trend Micro OfficeScan Improper Access Control Information Disclosure Vulnerability |
|||
ZDI-CAN-12409 |
VMware |
CVE-2020-3992 |
7.8 |
2020-11-25 |
VMware ESXi SLP Use-After-Free Privilege Escalation Vulnerability |
|||
ZDI-CAN-11353 |
Fuji Electric |
CVE-2020-25171 |
7.8 |
2020-11-25 |
Fuji Electric V-Server Lite VPR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11173 |
SaltStack |
CVE-2020-16846 |
7.3 |
2020-11-24 |
SaltStack Salt rest_cherrypy ssh_remote_port_forwards Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-11172 |
SaltStack |
CVE-2020-16846 |
7.3 |
2020-11-24 |
SaltStack Salt rest_cherrypy ssh_port Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-11169 |
SaltStack |
CVE-2020-16846 |
7.3 |
2020-11-24 |
SaltStack Salt rest_cherrypy ssh_options Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-11167 |
SaltStack |
CVE-2020-16846 |
7.3 |
2020-11-24 |
SaltStack Salt rest_cherrypy tgt Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-11143 |
SaltStack |
CVE-2020-16846 |
7.3 |
2020-11-24 |
SaltStack Salt rest_cherrypy ssh_priv Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-11064 |
Trend Micro |
CVE-2020-28575 |
8.2 |
2020-11-24 |
Trend Micro ServerProtect ioctlMod Heap-based Buffer Overflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-12190 |
VMware |
CVE-2020-3992 |
8.8 |
2020-11-23 |
VMware ESXi SLP Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-11571 |
Trend Micro |
CVE-2020-28577 |
5.3 |
2020-11-22 |
Trend Micro Apex One Improper Access Control Information Disclosure Vulnerability |
|||
ZDI-CAN-11237 |
Trend Micro |
CVE-2020-28576 |
5.3 |
2020-11-22 |
Trend Micro Apex One Improper Access Control Information Disclosure Vulnerability |
|||
ZDI-CAN-11236 |
Trend Micro |
CVE-2020-28573 |
5.3 |
2020-11-22 |
Trend Micro Apex One Improper Access Control Information Disclosure Vulnerability |
|||
ZDI-CAN-12020 |
Microsoft |
CVE-2020-1319 |
8.8 |
2020-11-22 |
Microsoft Windows WebM Video Parsing Uninitialized Pointer Remote Code Execution Vulnerability |
|||
ZDI-CAN-11510 |
Linux |
CVE-2020-14351 |
7.8 |
2020-11-22 |
Linux Kernel Performance Counters Race Condition Privilege Escalation Vulnerability |
|||
ZDI-CAN-11867 |
Microsoft |
CVE-2020-17057 |
8.8 |
2020-11-11 |
Microsoft Windows DirectComposition Uninitialized Pointer Privilege Escalation Vulnerability |
|||
ZDI-CAN-11871 |
Microsoft |
CVE-2020-17048 |
7.5 |
2020-11-11 |
Microsoft Chakra Array Iterator Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-11875 |
Microsoft |
CVE-2020-17053 |
8.8 |
2020-11-11 |
Microsoft Internet Explorer array Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11874 |
Microsoft |
CVE-2020-17053 |
8.8 |
2020-11-11 |
Microsoft Internet Explorer array Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-11518 |
Microsoft |
CVE-2020-17019 |
7.8 |
2020-11-11 |
Microsoft Excel XLS File Parsing Double Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-11796 |
Microsoft |
CVE-2020-17014 |
6.1 |
2020-11-11 |
2020-12-01 |
Microsoft Windows Print Spooler Directory Junction Denial-of-Service Vulnerability |
||
ZDI-CAN-11361 |
Microsoft |
CVE-2020-17012 |
7.8 |
2020-11-11 |
Microsoft Windows bindflt Driver Missing Authentication Privilege Escalation Vulnerability |
|||
ZDI-CAN-11866 |
SAP |
CVE-2020-26817 |
7.8 |
2020-11-11 |
SAP 3D Visual Enterprise Viewer HPGL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11175 |
Cisco |
CVE-2020-3604 |
7.8 |
2020-11-10 |
Cisco WebEx Network Recording Player ARF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-11176 |
Cisco |
CVE-2020-3573 |
7.8 |
2020-11-10 |
Cisco WebEx Network Recording Player ARF File Parsing Uninitialized Pointer Remote Code Execution Vulnerability |
|||
ZDI-CAN-11133 |
Cisco |
CVE-2020-3603 |
7.8 |
2020-11-10 |
Cisco WebEx Network Recording Player ARF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11187 |
WECON |
CVE-2020-25181 |
7.8 |
2020-11-10 |
WECON PLC Editor WCP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-11186 |
WECON |
CVE-2020-25181 |
7.8 |
2020-11-10 |
WECON PLC Editor WCP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-11185 |
WECON |
CVE-2020-25177 |
7.8 |
2020-11-10 |
WECON PLC Editor WCP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-12015 |
Adobe |
CVE-2020-24438 |
3.3 |
2020-11-10 |
Adobe Acrobat Reader DC AVDocumentLocal Use-After-Free Information Disclosure Vulnerability |
|||
ZDI-CAN-11958 |
Adobe |
CVE-2020-24434 |
3.3 |
2020-11-10 |
Adobe Acrobat Pro DC PDF Export Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11957 |
Adobe |
CVE-2020-24436 |
7.8 |
2020-11-10 |
Adobe Acrobat Pro DC PDF Export Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11540 |
Adobe |
CVE-2020-24426 |
3.3 |
2020-11-10 |
Adobe Acrobat Reader DC ID Parameter Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11100 |
WECON |
CVE-2020-16243 |
7.8 |
2020-11-10 |
WECON LeviStudioU HSC File Parsing CharSize Attribute Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-11098 |
WECON |
CVE-2020-16243 |
7.8 |
2020-11-10 |
WECON LeviStudioU HFT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-11097 |
WECON |
CVE-2020-16243 |
7.8 |
2020-11-10 |
WECON LeviStudioU HFT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-11488 |
Foxit |
CVE-2020-27857 |
7.8 |
2020-10-28 |
Foxit Studio Photo NEF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11434 |
Foxit |
CVE-2020-27856 |
3.3 |
2020-10-28 |
Foxit Studio Photo CR2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11433 |
Foxit |
CVE-2020-27855 |
3.3 |
2020-10-28 |
Foxit Studio Photo SR2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11432 |
Foxit |
CVE-2020-17436 |
3.3 |
2020-10-28 |
Foxit Studio Photo CMP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11358 |
Foxit |
CVE-2020-17435 |
3.3 |
2020-10-28 |
Foxit Studio Photo CR2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11357 |
Foxit |
CVE-2020-17434 |
3.3 |
2020-10-28 |
Foxit Studio Photo ARW File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11356 |
Foxit |
CVE-2020-17433 |
3.3 |
2020-10-28 |
Foxit Studio Photo CMP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11335 |
Foxit |
CVE-2020-17432 |
3.3 |
2020-10-28 |
Foxit Studio Photo CR2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11333 |
Foxit |
CVE-2020-17431 |
7.8 |
2020-10-28 |
Foxit Studio Photo CR2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11332 |
Foxit |
CVE-2020-17430 |
7.8 |
2020-10-28 |
Foxit Studio Photo CR2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11337 |
Foxit |
CVE-2020-17429 |
3.3 |
2020-10-28 |
Foxit Studio Photo CMP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11336 |
Foxit |
CVE-2020-17428 |
3.3 |
2020-10-28 |
Foxit Studio Photo CMP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11334 |
Foxit |
CVE-2020-17427 |
7.8 |
2020-10-28 |
Foxit Studio Photo NEF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-11230 |
Foxit |
CVE-2020-17426 |
7.8 |
2020-10-28 |
Foxit Studio Photo CR2 File Parsing Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-11259 |
Foxit |
CVE-2020-17425 |
7.8 |
2020-10-28 |
Foxit Studio Photo EPS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11247 |
Foxit |
CVE-2020-17424 |
7.8 |
2020-10-28 |
Foxit Studio Photo EZI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11196 |
Foxit |
CVE-2020-17423 |
7.8 |
2020-10-28 |
Foxit Studio Photo ARW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-11195 |
Foxit |
CVE-2020-17422 |
3.3 |
2020-10-28 |
Foxit Studio Photo EPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11194 |
Foxit |
CVE-2020-17421 |
7.8 |
2020-10-28 |
Foxit Studio Photo NEF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11193 |
Foxit |
CVE-2020-17420 |
3.3 |
2020-10-28 |
Foxit Studio Photo NEF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11192 |
Foxit |
CVE-2020-17419 |
7.8 |
2020-10-28 |
Foxit Studio Photo NEF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11197 |
Foxit |
CVE-2020-17418 |
7.8 |
2020-10-28 |
Foxit Studio Photo EZIX channel id Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11198 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager SAMDownloadServlet Deserialization Of Untrusted Data Privilege Escalation Vulnerability |
|||
ZDI-CAN-11203 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager RegistrationServlet Deserialization Of Untrusted Data Privilege Escalation Vulnerability |
|||
ZDI-CAN-11204 |
Micro Focus |
CVE-2020-11858 |
7.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager Service Incorrect Permission Assignment Privilege Escalation Vulnerability |
|||
ZDI-CAN-11417 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager GenericAdapterService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11416 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager LicensingService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11415 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager AutomationMappingService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11414 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager ResourceManagementService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11413 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager MultiTenancyService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11412 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager CITService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11411 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager LDAPService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11410 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager SnapshotService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11409 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager ClassModelService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11408 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager PermissionsService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11407 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager CommonService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11406 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager ImpactService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11405 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager SchedulerService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11404 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager LocationService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11403 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager BundleService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11402 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager HistoryService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11401 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager CIService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11400 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager DataAcquisitionService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11399 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager SoftwareLibraryService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11398 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager ServiceDiscoveryService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11397 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager DiscoveryService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11396 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager MailService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11395 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager RelatedCIsService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11394 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager FolderService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11393 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager PatternService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11392 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager CMSImagesService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11391 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager ReportService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11390 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager TopologyService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11389 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager WatchServerAPI Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11388 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager BusinessModelFacadeForGui Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11387 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager FoldersFacade Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11386 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager SchedulerFacadeForGui Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11385 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager PackageFacadeForGui Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11384 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager CorrelationRunnerFacade Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11383 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager CorrelationFacadeForGui Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11382 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager CategoryFacadeForGui Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11381 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager CmdbOperationExecuterService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11200 |
Micro Focus |
CVE-2020-11853 |
8.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager SecurityService Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11201 |
Micro Focus |
CVE-2020-11854 |
9.8 |
2020-10-28 |
Micro Focus Operations Bridge Manager diagnostics Use of Hard-coded Credentials Remote Code Execution Vulnerability |
|||
ZDI-CAN-11047 |
Trend Micro |
CVE-2020-27015 |
6.0 |
2020-10-26 |
Trend Micro Antivirus for Mac Error Message Information Disclosure Vulnerability |
|||
ZDI-CAN-11045 |
Trend Micro |
CVE-2020-27014 |
8.2 |
2020-10-26 |
Trend Micro Antivirus for Mac Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
|||
ZDI-CAN-10607 |
WECON |
CVE-2020-25186 |
5.5 |
2020-10-22 |
WECON LeviStudioU XML External Entity Processing Information Disclosure Vulnerability |
|||
ZDI-CAN-11687 |
Oracle |
CVE-2020-14876 |
7.5 |
2020-10-22 |
Oracle E-Business Suite ozfVendorLov SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-11829 |
Oracle |
CVE-2020-14825 |
9.8 |
2020-10-22 |
Oracle WebLogic Server T3 Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11679 |
Oracle |
CVE-2020-14885 |
5.3 |
2020-10-22 |
Oracle VirtualBox Shader Bytecode Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11677 |
Oracle |
CVE-2020-14886 |
5.3 |
2020-10-22 |
Oracle VirtualBox Shader Bytecode Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11676 |
Oracle |
CVE-2020-14884 |
5.3 |
2020-10-22 |
Oracle VirtualBox Shader Bytecode Type Confusion Information Disclosure Vulnerability |
|||
ZDI-CAN-11678 |
Oracle |
CVE-2020-14881 |
5.3 |
2020-10-22 |
Oracle VirtualBox Shader Bytecode Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11591 |
Oracle |
CVE-2020-14825 |
9.8 |
2020-10-22 |
Oracle WebLogic Server T3 Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11453 |
Oracle |
CVE-2020-14841 |
9.8 |
2020-10-22 |
Oracle WebLogic Server IIOP Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11305 |
Oracle |
CVE-2020-14859 |
9.8 |
2020-10-22 |
Oracle WebLogic Server T3 Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-10818 |
Oracle |
CVE-2020-14841 |
9.8 |
2020-10-22 |
Oracle WebLogic Server IIOP Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-10968 |
Oracle |
CVE-2020-14825 |
9.8 |
2020-10-22 |
Oracle WebLogic Server T3 Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11477 |
Adobe |
CVE-2020-24410 |
7.8 |
2020-10-22 |
Adobe Illustrator PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-11474 |
Adobe |
CVE-2020-24409 |
7.8 |
2020-10-22 |
Adobe Illustrator PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-11346 |
Adobe |
CVE-2020-24411 |
7.8 |
2020-10-22 |
Adobe Illustrator PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11563 |
VMware |
CVE-2020-3992 |
9.8 |
2020-10-20 |
VMware ESXi SLP Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-11228 |
VMware |
CVE-2020-3982 |
8.2 |
2020-10-20 |
2021-03-02 |
VMware Workstation BDOOR_CMD_PATCH_ACPI_TABLES Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
||
ZDI-CAN-11227 |
VMware |
CVE-2020-3981 |
6.0 |
2020-10-20 |
2021-03-02 |
VMware Workstation BDOOR_CMD_PATCH_ACPI_TABLES Time-Of-Check Time-Of-Use Information Disclosure Vulnerability |
||
ZDI-CAN-11705 |
SAP |
CVE-2020-6374 |
7.8 |
2020-10-19 |
SAP 3D Visual Enterprise Viewer JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-11243 |
SAP |
CVE-2020-6315 |
5.5 |
2020-10-19 |
SAP 3D Visual Enterprise Viewer SVG File XML External Entity Processing Information Disclosure Vulnerability |
|||
ZDI-CAN-11467 |
SAP |
CVE-2020-6372 |
7.8 |
2020-10-19 |
SAP 3D Visual Enterprise Viewer PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11462 |
SAP |
CVE-2020-6373 |
7.8 |
2020-10-19 |
SAP 3D Visual Enterprise Viewer PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11373 |
Advantech |
CVE-2020-25157 |
7.5 |
2020-10-19 |
Advantech R-SeeNet device_position device_id SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-11262 |
Advantech |
CVE-2020-25161 |
8.8 |
2020-10-19 |
Advantech WebAccess/SCADA WADashboard External Control of File Path Remote Code Execution Vulnerability |
|||
ZDI-CAN-10924 |
Apple |
CVE-2020-9990 |
7.8 |
2020-10-19 |
Apple macOS process_token_SetFence Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
|||
ZDI-CAN-10823 |
Apple |
CVE-2020-9990 |
7.8 |
2020-10-19 |
Apple macOS process_token_SetFence Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
|||
ZDI-CAN-11981 |
Microsoft |
CVE-2020-16968 |
8.8 |
2020-10-19 |
Microsoft Windows Camera Codec Pack Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11980 |
Microsoft |
CVE-2020-16915 |
8.8 |
2020-10-19 |
Microsoft Windows Media Player HEVC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11602 |
Microsoft |
CVE-2020-16930 |
7.8 |
2020-10-19 |
Microsoft Excel XLS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11613 |
Microsoft |
CVE-2020-16931 |
7.8 |
2020-10-19 |
Microsoft Excel XLS File Parsing Uninitialized Variable Remote Code Execution Vulnerability |
|||
ZDI-CAN-11622 |
Microsoft |
CVE-2020-16939 |
7.3 |
2020-10-19 |
Microsoft Windows Group Policy Client Service Link Resolution Privilege Escalation Vulnerability |
|||
ZDI-CAN-11529 |
Microsoft |
CVE-2020-16932 |
7.8 |
2020-10-19 |
Microsoft Excel XLS File Parsing Uninitialized Variable Remote Code Execution Vulnerability |
|||
ZDI-CAN-11524 |
Microsoft |
CVE-2020-16930 |
7.8 |
2020-10-19 |
Microsoft Excel XLS File Parsing Uninitialized Pointer Remote Code Execution Vulnerability |
|||
ZDI-CAN-11516 |
Microsoft |
CVE-2020-16929 |
7.8 |
2020-10-19 |
Microsoft Excel XLS File Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-11250 |
Microsoft |
CVE-2020-16947 |
3.7 |
2020-10-19 |
Microsoft Outlook HTML Email Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11249 |
Microsoft |
CVE-2020-16947 |
8.1 |
2020-10-19 |
Microsoft Outlook HTML Email Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-11129 |
Microsoft |
CVE-2020-16940 |
5.5 |
2020-10-19 |
Microsoft Windows User Profile Service Arbitrary File Deletion Vulnerability |
|||
ZDI-CAN-11174 |
Microsoft |
CVE-2020-1167 |
7.8 |
2020-10-19 |
Microsoft 3D Builder GLB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-11032 |
Microsoft |
CVE-2020-17003 |
5.3 |
2020-10-14 |
Microsoft 3D Viewer FBX File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-11241 |
Microsoft |
CVE-2020-16967 |
7.8 |
2020-10-14 |
Microsoft Windows Camera Codec Pack Image Processing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11029 |
LAquis |
CVE-2020-25188 |
7.8 |
2020-10-14 |
LAquis SCADA LQS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-10945 |
Trend Micro |
CVE-2020-27013 |
4.4 |
2020-10-14 |
Trend Micro Antivirus for Mac Improper Access Control Information Disclosure Vulnerability |
|||
ZDI-CAN-11046 |
Trend Micro |
CVE-2020-25777 |
5.4 |
2020-10-14 |
Trend Micro Antivirus for Mac Protection Bypass Vulnerability |
|||
ZDI-CAN-11048 |
Trend Micro |
CVE-2020-25778 |
6.0 |
2020-10-14 |
Trend Micro Antivirus for Mac Error Message Information Disclosure Vulnerability |
|||
ZDI-CAN-10181 |
Realtek |
7.5 |
2020-10-08 |
2021-06-29 |
(0Day) Realtek rtl81xx SDK Wi-Fi Driver rtwlane Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10180 |
Realtek |
7.1 |
2020-10-08 |
2021-06-29 |
(0Day) Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11184 |
Apple |
CVE-2020-9883 |
7.8 |
2020-10-08 |
Apple macOS CoreGraphics JBIG2Bitmap Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10580 |
IBM |
CVE-2020-4799 |
7.8 |
2020-10-08 |
IBM Informix spatial Out-Of-Bounds Write Privilege Escalation Vulnerability |
|||
ZDI-CAN-10941 |
Trend Micro |
CVE-2020-25776 |
7.8 |
2020-10-01 |
Trend Micro Antivirus for Mac Symbolic Link Privilege Escalation Vulnerability |
|||
ZDI-CAN-11226 |
Foxit |
CVE-2020-17413 |
7.8 |
2020-09-29 |
2020-10-09 |
Foxit PhantomPDF U3DBrowser U3D File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||
ZDI-CAN-11657 |
Foxit |
CVE-2020-17417 |
7.8 |
2020-09-29 |
2020-10-09 |
Foxit Reader AcroForm Annotation Use-After-Free Remote Code Execution Vulnerability |
||
ZDI-CAN-11497 |
Foxit |
CVE-2020-17416 |
7.8 |
2020-09-29 |
2020-10-09 |
Foxit Reader JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||
ZDI-CAN-11308 |
Foxit |
CVE-2020-17415 |
7.8 |
2020-09-29 |
2020-10-09 |
Foxit PhantomPDF Update Service Incorrect Permission Assignment Privilege Escalation Vulnerability |
||
ZDI-CAN-11229 |
Foxit |
CVE-2020-17414 |
7.8 |
2020-09-29 |
2020-10-09 |
Foxit Reader Update Service Incorrect Permission Assignment Privilege Escalation Vulnerability |
||
ZDI-CAN-11224 |
Foxit |
CVE-2020-17412 |
7.8 |
2020-09-29 |
2020-10-09 |
Foxit PhantomPDF U3DBrowser U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||
ZDI-CAN-11190 |
Foxit |
CVE-2020-17411 |
3.3 |
2020-09-29 |
2020-10-09 |
Foxit PhantomPDF U3DBrowser U3D Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||
ZDI-CAN-11135 |
Foxit |
CVE-2020-17410 |
7.8 |
2020-09-29 |
2020-10-09 |
Foxit PhantomPDF GIF File Parsing Use-After-Free Remote Code Execution Vulnerability |
||
ZDI-CAN-10819 |
Trend Micro |
CVE-2020-25775 |
5.3 |
2020-09-28 |
Trend Micro Maximum Security Race Condition Arbitrary File Deletion Vulnerability |
|||
ZDI-CAN-10794 |
Trend Micro |
CVE-2020-24562 |
7.8 |
2020-09-25 |
Trend Micro OfficeScan Hard Link Privilege Escalation Vulnerability |
|||
ZDI-CAN-11108 |
Trend Micro |
CVE-2020-25774 |
3.3 |
2020-09-25 |
Trend Micro OfficeScan ServerMigrationTool ZIP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10973 |
Trend Micro |
CVE-2020-25773 |
7.8 |
2020-09-25 |
Trend Micro OfficeScan ServerMigrationTool DAT File Parsing Double Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-10844 |
Trend Micro |
CVE-2020-25771 |
5.5 |
2020-09-25 |
Trend Micro Apex One scanServer64 Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10839 |
Trend Micro |
CVE-2020-25772 |
5.5 |
2020-09-25 |
Trend Micro Apex One scanServer64 Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10848 |
Trend Micro |
CVE-2020-25770 |
5.5 |
2020-09-25 |
Trend Micro Apex One scanServer64 Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10847 |
Trend Micro |
CVE-2020-24565 |
5.5 |
2020-09-25 |
Trend Micro Apex One scanServer64 Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10826 |
Trend Micro |
CVE-2020-24564 |
5.5 |
2020-09-25 |
Trend Micro Apex One Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10515 |
Trend Micro |
CVE-2020-24563 |
7.8 |
2020-09-25 |
Trend Micro Apex One Authentication Bypass Vulnerability |
|||
ZDI-CAN-11073 |
Micro Focus |
CVE-2020-11855 |
8.4 |
2020-09-23 |
Micro Focus Operations Bridge Reporter HPE-OBR Incorrect Permission Assignment Privilege Escalation Vulnerability |
|||
ZDI-CAN-11071 |
Micro Focus |
CVE-2020-11856 |
9.8 |
2020-09-23 |
Micro Focus Operations Bridge Reporter JMX Missing Authentication Remote Code Execution Vulnerability |
|||
ZDI-CAN-11075 |
Micro Focus |
CVE-2020-11857 |
7.3 |
2020-09-23 |
Micro Focus Operations Bridge Reporter shrboadmin Use of Hard-coded Credentials Remote Code Execution Vulnerability |
|||
ZDI-CAN-11116 |
Apple |
CVE-2020-9948 |
8.8 |
2020-09-21 |
Apple Safari replace Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-10942 |
Apple |
CVE-2020-9921 |
7.8 |
2020-09-21 |
Apple macOS process_token_BlitFramebuffer Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
|||
ZDI-CAN-10943 |
Apple |
CVE-2020-9921 |
7.8 |
2020-09-21 |
Apple macOS process_token_CopyPixelsSrcFBO Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
|||
ZDI-CAN-10944 |
Apple |
CVE-2020-9921 |
7.8 |
2020-09-21 |
Apple macOS process_token_TexSubImage2D Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
|||
ZDI-CAN-10946 |
Apple |
CVE-2020-9921 |
7.8 |
2020-09-21 |
Apple macOS process_token_TexPBOUpload Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
|||
ZDI-CAN-10643 |
Apple |
CVE-2020-9927 |
8.8 |
2020-09-21 |
Apple macOS AMDSupport Out-Of-Bounds Write Privilege Escalation Vulnerability |
|||
ZDI-CAN-11502 |
Hewlett Packard Enterprise |
CVE-2020-24623 |
5.3 |
2020-09-21 |
Hewlett Packard Enterprise Universal API Framework uaf_token SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-10966 |
Mitsubishi Electric |
CVE-2020-16226 |
9.8 |
2020-09-08 |
2020-09-17 |
Mitsubishi Electric MELSEC iQ-F Predictable TCP Sequence Number Remote Code Execution Vulnerability |
||
ZDI-CAN-10596 |
Microhard |
CVE-2020-17407 |
9.8 |
2020-08-26 |
2020-09-17 |
Microhard Bullet-LTE Basic Authorization Header Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||
ZDI-CAN-10595 |
Microhard |
CVE-2020-17406 |
8.8 |
2020-08-26 |
2020-09-17 |
Microhard Bullet-LTE Ping Command Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-11010 |
Fuji Electric |
7.8 |
2020-09-17 |
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10987 |
Fuji Electric |
7.8 |
2020-09-17 |
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10986 |
Fuji Electric |
7.8 |
2020-09-17 |
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10985 |
Fuji Electric |
7.8 |
2020-09-17 |
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10984 |
Fuji Electric |
7.8 |
2020-09-17 |
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10983 |
Fuji Electric |
7.8 |
2020-09-17 |
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10929 |
Fuji Electric |
7.8 |
2020-09-17 |
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10961 |
Fuji Electric |
7.8 |
2020-09-17 |
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-10960 |
Fuji Electric |
7.8 |
2020-09-17 |
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10959 |
Fuji Electric |
7.8 |
2020-09-17 |
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10958 |
Fuji Electric |
7.8 |
2020-09-17 |
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
||||
ZDI-CAN-10957 |
Fuji Electric |
7.8 |
2020-09-17 |
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10956 |
Fuji Electric |
7.8 |
2020-09-17 |
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
||||
ZDI-CAN-10928 |
Fuji Electric |
7.8 |
2020-09-17 |
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10927 |
Fuji Electric |
7.8 |
2020-09-17 |
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10906 |
Fuji Electric |
7.8 |
2020-09-17 |
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10931 |
Fuji Electric |
7.8 |
2020-09-17 |
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10930 |
Fuji Electric |
7.8 |
2020-09-17 |
(0Day) Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10611 |
Fuji Electric |
7.8 |
2020-09-17 |
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-11086 |
Apple |
CVE-2020-9919 |
7.8 |
2020-08-05 |
2020-09-17 |
Apple macOS ImageIO PIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||
ZDI-CAN-10610 |
Fuji Electric |
7.8 |
2020-09-17 |
(0Day) Fuji Electric Tellus Lite V-Simulator 6 SIM2 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-11165 |
Apple |
CVE-2020-9876 |
7.8 |
2020-08-05 |
2020-09-17 |
Apple macOS ImageIO TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||
ZDI-CAN-11106 |
Apple |
CVE-2020-9887 |
7.8 |
2020-09-16 |
Apple macOS AppleVPA JPEG Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10979 |
VMware |
CVE-2020-3988 |
6.5 |
2020-09-15 |
VMware Workstation ThinPrint JPEG2000 Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11066 |
VMware |
CVE-2020-3987 |
6.5 |
2020-09-15 |
2020-09-15 |
VMware Workstation ThinPrint EMR_STRETCHDIBITS Out-Of-Bounds Read Information Disclosure Vulnerability |
||
ZDI-CAN-11065 |
VMware |
CVE-2020-3986 |
6.5 |
2020-09-15 |
2020-09-15 |
VMware Workstation ThinPrint EMF Out-Of-Bounds Read Information Disclosure Vulnerability |
||
ZDI-CAN-10923 |
VMware |
CVE-2020-3990 |
6.5 |
2020-09-15 |
VMware Workstation ThinPrint TTCHeader Integer Overflow Information Disclosure Vulnerability |
|||
ZDI-CAN-10922 |
VMware |
CVE-2020-3989 |
8.8 |
2020-09-15 |
VMware Workstation ThinPrint name Table Integer Overflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-10754 |
NETGEAR |
CVE-2020-17409 |
6.5 |
2020-09-15 |
NETGEAR Multiple Routers mini_httpd Authentication Bypass Vulnerability |
|||
ZDI-CAN-11263 |
Microsoft |
CVE-2020-0997 |
7.8 |
2020-10-16 |
Microsoft Windows Camera Codec Pack Image Processing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10146 |
Fatek Automation |
7.8 |
2020-09-14 |
(0Day) Fatek Automation PLC WinProladder TAB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10570 |
Fatek Automation |
7.8 |
2020-09-14 |
(0Day) Fatek Automation PLC WinProladder SPF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-11501 |
SAP |
CVE-2020-6361 |
7.8 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer RLE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11500 |
SAP |
CVE-2020-6360 |
7.8 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer DIB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11499 |
SAP |
CVE-2020-6359 |
7.8 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer PLT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-11484 |
SAP |
CVE-2020-6358 |
7.8 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer FBX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11340 |
SAP |
CVE-2020-6357 |
7.8 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer U3D File Parsing Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-11290 |
SAP |
CVE-2020-6350 |
7.8 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer BMP File Parsing Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-11289 |
SAP |
CVE-2020-6349 |
7.8 |
2020-09-10 |
2021-01-27 |
SAP 3D Visual Enterprise Viewer GIF File Parsing Memory Corruption Remote Code Execution Vulnerability |
||
ZDI-CAN-11286 |
SAP |
CVE-2020-6348 |
7.8 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer GIF File Parsing Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-11285 |
SAP |
CVE-2020-6347 |
7.8 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer HDR File Parsing Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-11284 |
SAP |
CVE-2020-6346 |
7.8 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer BMP File Parsing Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-11283 |
SAP |
CVE-2020-6356 |
7.8 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11282 |
SAP |
CVE-2020-6355 |
7.8 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer TGA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-11281 |
SAP |
CVE-2020-6345 |
7.8 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer TGA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-11280 |
SAP |
CVE-2020-6336 |
7.8 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11292 |
SAP |
CVE-2020-6354 |
5.3 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-11291 |
SAP |
CVE-2020-6338 |
7.8 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer RH File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11288 |
SAP |
CVE-2020-6339 |
7.8 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-11287 |
SAP |
CVE-2020-6337 |
7.8 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer HDR File Parsing Memory Corruption Remote Code Execution Vulnerabililty |
|||
ZDI-CAN-11275 |
SAP |
CVE-2020-6340 |
7.8 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11345 |
SAP |
CVE-2020-6341 |
7.8 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer EPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-11344 |
SAP |
CVE-2020-6342 |
7.8 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11342 |
SAP |
CVE-2020-6343 |
7.8 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer EPS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11294 |
SAP |
CVE-2020-6344 |
7.8 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer PDF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability |
|||
ZDI-CAN-11272 |
SAP |
CVE-2020-6353 |
5.3 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-11265 |
SAP |
CVE-2020-6352 |
7.8 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer FBX File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability |
|||
ZDI-CAN-11261 |
SAP |
CVE-2020-6351 |
7.8 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer FBX File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability |
|||
ZDI-CAN-11158 |
SAP |
CVE-2020-6335 |
7.0 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer HPGL File Parsing hpgl Plugin Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11161 |
SAP |
CVE-2020-6334 |
4.5 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-11159 |
SAP |
CVE-2020-6333 |
7.0 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer HPGL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11160 |
SAP |
CVE-2020-6332 |
7.0 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer HPGL File Parsing hpgl Plugin Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11205 |
SAP |
CVE-2020-6331 |
7.0 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer HPGL File Parsing hpgl Plugin Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11152 |
SAP |
CVE-2020-6314 |
7.0 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer HPGL File Parsing hpgl Plugin Untrusted Pointer Dereference Remote Code Execution Vulnerability |
|||
ZDI-CAN-10940 |
SAP |
CVE-2020-6321 |
7.0 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer U3D File Parsing 3difr Plugin Uninitialized Pointer Remote Code Execution Vulnerability |
|||
ZDI-CAN-11090 |
SAP |
CVE-2020-6322 |
7.0 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer 3DM File Parsing rhino Plugin Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-11089 |
SAP |
CVE-2020-6327 |
7.0 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer 3DM File Parsing Integer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-11147 |
SAP |
CVE-2020-6328 |
7.0 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer CGM File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability |
|||
ZDI-CAN-11113 |
SAP |
CVE-2020-6329 |
4.5 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-11091 |
SAP |
CVE-2020-6330 |
7.0 |
2020-09-10 |
SAP 3D Visual Enterprise Viewer 3DM File Parsing rhino Plugin Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-11511 |
Microsoft |
CVE-2020-1319 |
8.8 |
2020-09-10 |
Microsoft Windows WebM Video Parsing Uninitialized Pointer Remote Code Execution Vulnerability |
|||
ZDI-CAN-11446 |
Microsoft |
CVE-2020-1594 |
7.8 |
2020-09-10 |
Microsoft Excel XLS File SST Record Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11276 |
Microsoft |
CVE-2020-1193 |
5.3 |
2020-09-10 |
Microsoft Excel XLS File Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-11242 |
Microsoft |
CVE-2020-1338 |
7.8 |
2020-09-10 |
Microsoft Word DOCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-11126 |
Microsoft |
CVE-2020-0914 |
2.5 |
2020-09-10 |
Microsoft Windows State Repository Service Race Condition Use-After-Free Information Disclosure Vulnerability |
|||
ZDI-CAN-11215 |
Microsoft |
CVE-2020-1129 |
8.8 |
2020-09-10 |
Microsoft Windows Media Player HEVC Stream Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-11153 |
Microsoft |
CVE-2020-1074 |
7.8 |
2020-09-10 |
Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11128 |
Microsoft |
CVE-2020-1039 |
7.8 |
2020-09-10 |
Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11214 |
Microsoft |
CVE-2020-16874 |
7.0 |
2020-09-10 |
Microsoft Visual Studio DDS File Parsing Integer Overflow Remote Code Execution Multiple Vulnerabilities |
|||
ZDI-CAN-11213 |
Microsoft |
CVE-2020-16856 |
7.8 |
2020-09-10 |
Microsoft Visual Studio DDS File Parsing Integer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-11212 |
Microsoft |
CVE-2020-16874 |
3.3 |
2020-09-10 |
Microsoft Visual Studio DDS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10834 |
Microsoft |
CVE-2020-0908 |
6.3 |
2020-09-10 |
Microsoft Internet Explorer CTSF3CandidateMessage Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-11240 |
Microsoft |
CVE-2020-0997 |
7.8 |
2020-09-10 |
Microsoft Windows Camera Codec Pack Image Processing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11156 |
Microsoft |
CVE-2020-16874 |
7.0 |
2020-09-10 |
Microsoft Visual Studio DDS File Parsing Integer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-11095 |
Microsoft |
CVE-2020-16874 |
7.0 |
2020-09-10 |
Microsoft Visual Studio DDS File Parsing Integer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-11221 |
Adobe |
CVE-2020-9725 |
7.8 |
2020-09-10 |
Adobe FrameMaker FM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-11110 |
Adobe |
CVE-2020-9726 |
7.8 |
2020-09-10 |
Adobe FrameMaker FM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-10737 |
Fuji Electric |
7.8 |
2020-09-08 |
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10736 |
Fuji Electric |
7.8 |
2020-09-08 |
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10735 |
Fuji Electric |
7.8 |
2020-09-08 |
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10734 |
Fuji Electric |
7.8 |
2020-09-08 |
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10705 |
Fuji Electric |
7.8 |
2020-09-08 |
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10698 |
Fuji Electric |
7.8 |
2020-09-08 |
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10697 |
Fuji Electric |
7.8 |
2020-09-08 |
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10696 |
Fuji Electric |
7.8 |
2020-09-08 |
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-10695 |
Fuji Electric |
7.8 |
2020-09-08 |
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10680 |
Fuji Electric |
7.8 |
2020-09-08 |
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10679 |
Fuji Electric |
7.8 |
2020-09-08 |
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10678 |
Fuji Electric |
7.8 |
2020-09-08 |
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-10677 |
Fuji Electric |
7.8 |
2020-09-08 |
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10676 |
Fuji Electric |
7.8 |
2020-09-08 |
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
||||
ZDI-CAN-10675 |
Fuji Electric |
7.8 |
2020-09-08 |
(0Day) Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10801 |
NEC |
CVE-2020-17408 |
7.5 |
2020-09-08 |
NEC ExpressCluster ApplyConfig XML External Entity Processing Information Disclosure Vulnerability |
|||
ZDI-CAN-10907 |
Cisco |
CVE-2020-3453 |
6.8 |
2020-09-08 |
Cisco RV340 upload.cgi Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10640 |
Cisco |
CVE-2020-3451 |
5.5 |
2020-09-08 |
Cisco RV340 upload.cgi Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10603 |
Hewlett Packard Enterprise |
CVE-2020-24625 |
7.5 |
2020-09-08 |
2020-10-01 |
(0Day) Hewlett Packard Enterprise Pay per use UCS Meter ReceiverServlet doGet Directory Traversal Information Disclosure Vulnerability |
||
ZDI-CAN-10602 |
Hewlett Packard Enterprise |
CVE-2020-24624 |
7.5 |
2020-09-08 |
2020-10-01 |
(0Day) Hewlett Packard Enterprise Pay per use UCS Meter DownloadServlet execute Directory Traversal Information Disclosure Vulnerability |
||
ZDI-CAN-10601 |
Hewlett Packard Enterprise |
CVE-2020-24626 |
9.8 |
2020-09-08 |
2020-10-01 |
(0Day) Hewlett Packard Enterprise Pay per use UCS Meter ReceiverServlet doPost Directory Traversal Remote Code Execution Vulnerability |
||
ZDI-CAN-10790 |
Trend Micro |
CVE-2020-24559 |
7.8 |
2020-08-31 |
Trend Micro Apex One Hard Link Privilege Escalation Vulnerability |
|||
ZDI-CAN-10760 |
Trend Micro |
CVE-2020-24558 |
2.5 |
2020-08-31 |
Trend Micro Apex One Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10514 |
Trend Micro |
CVE-2020-24557 |
7.8 |
2020-08-31 |
Trend Micro Apex One Improper Access Control Privilege Escalation Vulnerability |
|||
ZDI-CAN-10513 |
Trend Micro |
CVE-2020-24556 |
7.8 |
2020-08-31 |
Trend Micro Apex One Hard Link Privilege Escalation Vulnerability |
|||
ZDI-CAN-10995 |
Advantech |
CVE-2020-16245 |
9.8 |
2020-08-27 |
Advantech iView NetworkServlet findSummaryCfgDeviceListExport Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-10994 |
Advantech |
CVE-2020-16245 |
9.8 |
2020-08-27 |
Advantech iView NetworkServlet findUpdateDeviceListExport Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-10993 |
Advantech |
CVE-2020-16245 |
9.8 |
2020-08-27 |
Advantech iView NetworkServlet findCfgDeviceListExport Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-10992 |
Advantech |
CVE-2020-16245 |
9.8 |
2020-08-27 |
Advantech iView NetworkServlet findSummaryUpdateDeviceListExport Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-10991 |
Advantech |
CVE-2020-16245 |
9.4 |
2020-08-27 |
Advantech iView NetworkServlet backupDatabase Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-10990 |
Advantech |
CVE-2020-16245 |
9.8 |
2020-08-27 |
Advantech iView TaskMgrTable exportTaskMgrReportDetails Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-10989 |
Advantech |
CVE-2020-16245 |
8.2 |
2020-08-27 |
Advantech iView PSTable exportPSInventoryTable Directory Traversal File Creation Vulnerability |
|||
ZDI-CAN-10988 |
Advantech |
CVE-2020-16245 |
8.2 |
2020-08-27 |
Advantech iView DeviceTreeTable exportInventoryTable Directory Traversal File Creation Vulnerability |
|||
ZDI-CAN-10976 |
Advantech |
CVE-2020-16245 |
9.8 |
2020-08-27 |
Advantech iView DeviceTreeTable exportTaskMgrReport Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-11431 |
Trend Micro |
CVE-2020-15605 |
8.1 |
2020-08-27 |
Trend Micro Vulnerability Protection Authentication Bypass Vulnerability |
|||
ZDI-CAN-11000 |
Apple |
CVE-2020-9908 |
6.5 |
2020-08-27 |
Apple macOS Intel Graphics Driver Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10962 |
Microsoft |
CVE-2020-1457 |
7.8 |
2020-08-27 |
Microsoft Windows hevcdecoder_store MKV File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10980 |
Senstar |
CVE-2020-17405 |
8.8 |
2020-08-26 |
Senstar Symphony SSOAuth Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-11191 |
Foxit |
CVE-2020-17404 |
7.8 |
2020-08-21 |
Foxit Studio Photo PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11003 |
Foxit |
CVE-2020-17403 |
7.8 |
2020-08-21 |
Foxit Studio Photo PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11368 |
Trend Micro |
CVE-2020-15601 |
8.1 |
2020-08-21 |
Trend Micro Deep Security Manager Authentication Bypass Vulnerability |
|||
ZDI-CAN-10546 |
WECON |
7.8 |
2020-08-19 |
(0Day) WECON LeviStudioU MultiLink bitaddr Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10543 |
WECON |
7.8 |
2020-08-19 |
(0Day) WECON LeviStudioU Alarm bitaddr Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10542 |
WECON |
7.8 |
2020-08-19 |
(0Day) WECON LeviStudioU Disc WordAddr3 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10541 |
WECON |
7.8 |
2020-08-19 |
(0Day) WECON LeviStudioU Disc WordAddr4 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10540 |
WECON |
7.8 |
2020-08-19 |
(0Day) WECON LeviStudioU Disc WordAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10528 |
WECON |
7.8 |
2020-08-19 |
(0Day) WECON LeviStudioU TrendSet WordAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10489 |
WECON |
7.8 |
2020-08-19 |
(0Day) WECON LeviStudioU AlarmSet bitaddr Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10548 |
WECON |
7.8 |
2020-08-19 |
(0Day) WECON LeviStudioU AlarmSet WordAddr9 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10547 |
WECON |
7.8 |
2020-08-19 |
(0Day) WECON LeviStudioU WordAlarmSet WordAddr9 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10545 |
WECON |
7.8 |
2020-08-19 |
(0Day) WECON LeviStudioU MultiLink WordAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10544 |
WECON |
7.8 |
2020-08-19 |
(0Day) WECON LeviStudioU WebSet WordAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10539 |
WECON |
7.8 |
2020-08-19 |
(0Day) WECON LeviStudioU DiscSet WordAddr2 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10538 |
WECON |
7.8 |
2020-08-19 |
(0Day) WECON LeviStudioU DiscSet WordAddr1 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10537 |
WECON |
7.8 |
2020-08-19 |
(0Day) WECON LeviStudioU XYSet WordAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10536 |
WECON |
7.8 |
2020-08-19 |
(0Day) WECON LeviStudioU XYSet WordAddr2 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10535 |
WECON |
7.8 |
2020-08-19 |
(0Day) WECON LeviStudioU XYSet WordAddr4 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10534 |
WECON |
7.8 |
2020-08-19 |
(0Day) WECON LeviStudioU XYSet WordAddr3 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10533 |
WECON |
7.8 |
2020-08-19 |
(0Day) WECON LeviStudioU XYSet WordAddr1 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10532 |
WECON |
7.8 |
2020-08-19 |
(0Day) WECON LeviStudioU TrendSet WordAddr4 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10531 |
WECON |
7.8 |
2020-08-19 |
(0Day) WECON LeviStudioU TrendSet WordAddr2 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10530 |
WECON |
7.8 |
2020-08-19 |
(0Day) WECON LeviStudioU TrendSet WordAddr3 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10529 |
WECON |
7.8 |
2020-08-19 |
(0Day) WECON LeviStudioU TrendSet WordAddr1 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10441 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition prefs sync_calendars Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10440 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition attendees fb_cals Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10439 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition fb fb_cals Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10436 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition Sort sortpref Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10435 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition Poll nav_poll Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10434 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition Remote Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10433 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition Event event_alarms Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10432 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition CalendarsManager _checkDisplayCals Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10431 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition Search filter Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10430 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition Search vfolder Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10429 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition Flags msgflags Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10428 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition Expanded expanded_folders Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10427 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition Upgrade upgrade_tasks Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10426 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition Horde last_logintasks Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10425 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition Compose reply_lang Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10458 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition prefs sync_calendars Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10457 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition Nag show_external Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10456 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition Prefs sync_lists Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10455 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition prefs sync_lists Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10454 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition Nag display_tasklists Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10453 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition List tasklist_columns Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10452 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition Task task_alarms Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10451 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition Nag display_tasklists Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10450 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition Nag display_tasklists Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10449 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition Ui generateUI Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10448 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition Kronolith remote_cals Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10447 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition Mnemo display_notepads Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10446 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition prefs sync_notepads Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10445 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition Kronolith show_time Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10444 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition prefs sync_notepads Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10443 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition Collection portal_layout Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10442 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition Kronolith remote_cals Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10438 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition remote_edit remote_cals Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-10437 |
Horde |
6.3 |
2020-08-19 |
(0Day) Horde Groupware Webmail Edition remote_unsubscribe remote_cals Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||||
ZDI-CAN-11063 |
Parallels |
CVE-2020-17402 |
6.5 |
2020-08-18 |
2024-07-08 |
Parallels Desktop prl_hypervisor Incorrect Permission Assignment for Critical Resource Information Disclosure Vulnerability |
||
ZDI-CAN-11363 |
Parallels |
CVE-2020-17401 |
6.0 |
2020-08-18 |
Parallels Desktop VGA Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11304 |
Parallels |
CVE-2020-17400 |
8.8 |
2020-08-18 |
Parallels Desktop prl_hypervisor Out-Of-Bounds Read Privilege Escalation Vulnerability |
|||
ZDI-CAN-11303 |
Parallels |
CVE-2020-17399 |
8.8 |
2020-08-18 |
Parallels Desktop prl_hypervisor Out-Of-Bounds Write Privilege Escalation Vulnerability |
|||
ZDI-CAN-11302 |
Parallels |
CVE-2020-17398 |
6.5 |
2020-08-18 |
Parallels Desktop prl_hypervisor Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11253 |
Parallels |
CVE-2020-17397 |
7.5 |
2020-08-18 |
Parallels Desktop Networking Out-Of-Bounds Access Privilege Escalation Vulnerability |
|||
ZDI-CAN-11217 |
Parallels |
CVE-2020-17396 |
8.8 |
2020-08-18 |
Parallels Desktop prl_hypervisor Integer Overflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-11134 |
Parallels |
CVE-2020-17395 |
7.5 |
2020-08-18 |
Parallels Desktop Networking Service Integer Underflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-11132 |
Parallels |
CVE-2020-17394 |
6.0 |
2020-08-18 |
Parallels Desktop OEMNet Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10520 |
Parallels |
CVE-2020-17393 |
6.5 |
2020-08-18 |
2021-03-02 |
Parallels Desktop prl_hypervisor Improper Input Validation Information Disclosure Vulnerability |
||
ZDI-CAN-10519 |
Parallels |
CVE-2020-17392 |
8.8 |
2020-08-18 |
2021-03-02 |
Parallels Desktop prl_hypervisor Untrusted Pointer Dereference Privilege Escalation Vulnerability |
||
ZDI-CAN-10518 |
Parallels |
CVE-2020-17391 |
6.5 |
2020-08-18 |
2021-03-02 |
Parallels Desktop prl_hypervisor Exposed Dangerous Method Information Disclosure Vulnerability |
||
ZDI-CAN-10030 |
Parallels |
CVE-2020-17390 |
3.8 |
2020-08-18 |
Parallels Desktop hypervisor Out-Of-Bounds Read Privilege Escalation Vulnerability |
|||
ZDI-CAN-10605 |
Schneider Electric |
CVE-2020-7522 |
9.8 |
2020-08-17 |
Schneider Electric APC Easy UPS Online SoundUploadServlet processRequest Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-10604 |
Schneider Electric |
CVE-2020-7521 |
9.8 |
2020-08-17 |
Schneider Electric APC Easy UPS Online FileUploadServlet processRequest Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-10892 |
QEMU |
CVE-2020-10756 |
6.5 |
2020-08-17 |
QEMU SLiRP Networking Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10937 |
Microsoft |
CVE-2020-1492 |
8.8 |
2020-08-14 |
Microsoft Windows QuickTime Video Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-10816 |
Microsoft |
CVE-2020-1561 |
5.0 |
2020-08-14 |
Microsoft Windows fontdrvhost Font Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-11006 |
Microsoft |
CVE-2020-1560 |
7.8 |
2020-08-14 |
Microsoft Windows av1decodermft_store MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10925 |
Microsoft |
CVE-2020-1555 |
7.5 |
2020-08-14 |
Microsoft Chakra Inline Cache Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-10974 |
Microsoft |
CVE-2020-1581 |
7.8 |
2020-08-13 |
Microsoft Office OfficeClickToRun Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
|||
ZDI-CAN-10914 |
Microsoft |
CVE-2020-1493 |
7.8 |
2020-08-13 |
Microsoft Outlook EML Rendering Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-10908 |
Microsoft |
CVE-2020-1520 |
7.8 |
2020-08-13 |
Microsoft Windows PFB Font File Heap-based Buffer Overflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-11590 |
Microsoft |
CVE-2020-1556 |
2.5 |
2020-08-13 |
Microsoft Windows WalletService Race Condition Information Disclosure Vulnerability |
|||
ZDI-CAN-11589 |
Microsoft |
CVE-2020-1556 |
2.5 |
2020-08-13 |
Microsoft Windows WalletService Race Condition Information Disclosure Vulnerability |
|||
ZDI-CAN-11136 |
Microsoft |
CVE-2020-1337 |
7.8 |
2020-08-13 |
Microsoft Windows Print Spooler Directory Junction Privilege Escalation Vulnerability |
|||
ZDI-CAN-10812 |
Microsoft |
CVE-2020-1577 |
3.3 |
2020-08-13 |
Microsoft Windows findBaseLigature TTF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11007 |
Microsoft |
CVE-2020-1585 |
7.8 |
2020-08-13 |
Microsoft Windows av1decodermft_store AVIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10609 |
Microsoft |
CVE-2020-1574 |
8.8 |
2020-08-13 |
Microsoft Windows WEBP VP8X Integer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-11254 |
Adobe |
CVE-2020-9715 |
7.8 |
2020-08-12 |
Adobe Acrobat Reader DC ESObject Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-11166 |
Adobe |
CVE-2020-9712 |
3.3 |
2020-08-12 |
Adobe Acrobat Pro DC Web2PDF:AppLinks JavaScript Restrictions Bypass Vulnerability |
|||
ZDI-CAN-11164 |
Adobe |
CVE-2020-9710 |
3.3 |
2020-08-12 |
2020-08-19 |
Adobe Acrobat Pro DC convert Out-Of-Bounds Read Information Disclosure Vulnerability |
||
ZDI-CAN-11162 |
Adobe |
CVE-2020-9706 |
3.3 |
2020-08-12 |
Adobe Acrobat Pro DC updateFeed Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11150 |
Adobe |
CVE-2020-9706 |
3.3 |
2020-08-12 |
Adobe Acrobat Pro DC removeFeed Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11149 |
Adobe |
CVE-2020-9707 |
3.3 |
2020-08-12 |
Adobe Acrobat Pro DC selectFeed Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11148 |
Adobe |
CVE-2020-9706 |
3.3 |
2020-08-12 |
Adobe Acrobat Pro DC addFeed Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11105 |
Adobe |
CVE-2020-9697 |
5.5 |
2020-08-12 |
Adobe Acrobat Reader DC app.measureDialog Information Disclosure Vulnerability |
|||
ZDI-CAN-11026 |
Adobe |
CVE-2020-9694 |
7.8 |
2020-08-12 |
Adobe Acrobat Reader DC JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11025 |
Adobe |
CVE-2020-9693 |
7.8 |
2020-08-12 |
Adobe Acrobat Reader DC JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-11561 |
Canonical |
CVE-2020-15708 |
7.8 |
2020-08-11 |
Canonical Ubuntu Virtualization Library Arbitrary File Write Privilege Escalation Vulnerability |
|||
ZDI-CAN-11504 |
Canonical |
CVE-2020-15704 |
5.5 |
2020-08-11 |
Canonical Ubuntu Point-to-Point Protocol Daemon Arbitrary File Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11234 |
Canonical |
CVE-2020-15702 |
7.0 |
2020-08-11 |
Canonical Ubuntu apport Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
|||
ZDI-CAN-11233 |
Canonical |
CVE-2020-11936 |
2.5 |
2020-08-11 |
Canonical Ubuntu apport Unnecessary Privileges Information Disclosure Vulnerability |
|||
ZDI-CAN-10333 |
Micro Focus |
6.3 |
2020-08-10 |
2021-06-29 |
Micro Focus Secure Messaging Gateway manage_domains_save_data SaveData Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10502 |
Marvell |
CVE-2020-17389 |
8.8 |
2020-08-10 |
Marvell QConvergeConsole GWTTestServiceImpl decryptFile Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-10799 |
Marvell |
CVE-2020-17388 |
8.8 |
2020-08-10 |
Marvell QConvergeConsole Exposed Dangerous Method or Function Remote Code Execution |
|||
ZDI-CAN-10565 |
Marvell |
CVE-2020-17387 |
8.8 |
2020-08-10 |
Marvell QConvergeConsole writeObjectToConfigFile Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-10553 |
Marvell |
CVE-2020-15645 |
8.8 |
2020-08-10 |
Marvell QConvergeConsole getFileFromURL Unrestricted File Upload Remote Code Execution Vulnerability |
|||
ZDI-CAN-10550 |
Marvell |
CVE-2020-15644 |
8.8 |
2020-08-10 |
Marvell QConvergeConsole setAppFileBytes Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-10549 |
Marvell |
CVE-2020-15643 |
8.8 |
2020-08-10 |
Marvell QConvergeConsole saveAsText Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-10501 |
Marvell |
CVE-2020-15642 |
8.8 |
2020-08-10 |
Marvell QConvergeConsole isHPSmartComponent Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10499 |
Marvell |
CVE-2020-15641 |
7.5 |
2020-08-10 |
Marvell QConvergeConsole getFileUploadBytes Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-10497 |
Marvell |
CVE-2020-15640 |
7.5 |
2020-08-10 |
Marvell QConvergeConsole getFileUploadBytes Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-10496 |
Marvell |
CVE-2020-15639 |
9.8 |
2020-08-10 |
Marvell QConvergeConsole decryptFile Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-11041 |
Delta Industrial Automation |
CVE-2020-16223 |
7.8 |
2020-08-10 |
Delta Industrial Automation TPEditor TPE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10667 |
Delta Industrial Automation |
CVE-2020-16227 |
7.8 |
2020-08-10 |
Delta Industrial Automation TPEditor TPE File Parsing Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-10726 |
Delta Industrial Automation |
CVE-2020-16225 |
7.8 |
2020-08-10 |
Delta Industrial Automation TPEditor TPE File Parsing Write-what-where Condition Remote Code Execution Vulnerability |
|||
ZDI-CAN-8564 |
Delta Industrial Automation |
CVE-2020-16219 |
7.8 |
2020-08-10 |
Delta Industrial Automation TPEditor TPE File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-10130 |
Delta Industrial Automation |
CVE-2020-16221 |
7.8 |
2020-08-10 |
Delta Industrial Automation TPEditor TPE File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10128 |
Delta Industrial Automation |
CVE-2020-16219 |
7.8 |
2020-08-10 |
Delta Industrial Automation TPEditor TPE File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-10778 |
Apple |
CVE-2020-9939 |
8.2 |
2020-08-10 |
2021-06-29 |
(Pwn2Own) Apple macOS kextload Time-Of-Check Time-Of-Use Memory Corruption Vulnerability |
||
ZDI-CAN-10122 |
Advantech |
CVE-2020-16207 |
7.8 |
2020-08-10 |
Advantech WebAccess/HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10133 |
Advantech |
CVE-2020-16207 |
7.8 |
2020-08-10 |
Advantech WebAccess/HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10134 |
Advantech |
CVE-2020-16211 |
3.3 |
2020-08-10 |
Advantech WebAccess/HMI Designer PM3 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10135 |
Advantech |
CVE-2020-16213 |
7.8 |
2020-08-10 |
Advantech WebAccess/HMI Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10136 |
Advantech |
CVE-2020-16207 |
7.8 |
2020-08-10 |
Advantech WebAccess/HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10139 |
Advantech |
CVE-2020-16229 |
7.8 |
2020-08-10 |
Advantech WebAccess/HMI Designer PM3 File Parsing Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-10144 |
Advantech |
CVE-2020-16215 |
9.8 |
2020-08-10 |
Advantech WebAccess IOCTL 0x2711 BwPFile Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10187 |
Advantech |
CVE-2020-16217 |
7.8 |
2020-08-10 |
Advantech WebAccess/HMI Designer PM3 File Parsing Double Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-10188 |
Advantech |
CVE-2020-16207 |
7.8 |
2020-08-10 |
Advantech WebAccess/HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10121 |
Advantech |
CVE-2020-16207 |
7.8 |
2020-08-10 |
Advantech WebAccess/HMI Designer PM3 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-11543 |
FreeBSD |
CVE-2020-7460 |
8.8 |
2020-08-06 |
FreeBSD Kernel sendmsg System Call Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
|||
ZDI-CAN-10893 |
Delta Industrial Automation |
CVE-2020-16203 |
7.8 |
2020-08-05 |
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Uninitialized Pointer Dereference Remote Code Execution Vulnerability |
|||
ZDI-CAN-10888 |
Delta Industrial Automation |
CVE-2020-16201 |
3.3 |
2020-08-05 |
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10887 |
Delta Industrial Automation |
CVE-2020-16201 |
3.3 |
2020-08-05 |
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10885 |
Delta Industrial Automation |
CVE-2020-16201 |
3.3 |
2020-08-05 |
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10883 |
Delta Industrial Automation |
CVE-2020-16201 |
3.3 |
2020-08-05 |
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10881 |
Delta Industrial Automation |
CVE-2020-16199 |
7.8 |
2020-08-05 |
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10882 |
Delta Industrial Automation |
CVE-2020-16201 |
3.3 |
2020-08-05 |
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10886 |
Delta Industrial Automation |
CVE-2020-16201 |
3.3 |
2020-08-05 |
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10889 |
Delta Industrial Automation |
CVE-2020-16199 |
7.8 |
2020-08-05 |
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10890 |
Delta Industrial Automation |
CVE-2020-16199 |
7.8 |
2020-08-05 |
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-11151 |
Apple |
CVE-2020-9875 |
7.8 |
2020-08-05 |
Apple macOS ImageIO EXR Parsing Integer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9852 |
NETGEAR |
CVE-2020-15636 |
8.1 |
2020-08-04 |
NETGEAR Multiple Routers check_ra Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9853 |
NETGEAR |
CVE-2020-15635 |
8.8 |
2020-08-04 |
NETGEAR R6700 acsd Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9755 |
NETGEAR |
CVE-2020-15634 |
6.3 |
2020-08-04 |
NETGEAR R6700 httpd strtblupgrade Format String Remote Code Execution Vulnerability |
|||
ZDI-CAN-11426 |
X.Org |
CVE-2020-14347 |
5.5 |
2020-08-04 |
X.Org Server Pixel Data Uninitialized Memory Information Disclosure Vulnerability |
|||
ZDI-CAN-10950 |
Foxit |
CVE-2020-15638 |
7.8 |
2020-08-04 |
Foxit PhantomPDF JSCreate Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-10972 |
Foxit |
CVE-2020-15637 |
3.3 |
2020-08-04 |
Foxit PhantomPDF SetLocalDescription Use-After-Free Information Disclosure Vulnerability |
|||
ZDI-CAN-10559 |
Rockwell Automation |
CVE-2019-13510 |
7.8 |
2020-08-04 |
Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-10558 |
Rockwell Automation |
CVE-2019-13510 |
7.8 |
2020-08-04 |
Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-10557 |
Rockwell Automation |
CVE-2019-13510 |
7.8 |
2020-08-04 |
Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-10556 |
Rockwell Automation |
CVE-2019-13510 |
7.8 |
2020-08-04 |
Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-10555 |
Rockwell Automation |
CVE-2019-13510 |
7.8 |
2020-08-04 |
Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-10554 |
Rockwell Automation |
CVE-2019-13510 |
7.8 |
2020-08-04 |
Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-10332 |
IBM |
7.5 |
2020-07-28 |
(0Day) IBM Informix bts_tracefile Directory Traversal Remote Code Execution Vulnerability |
||||
ZDI-CAN-11121 |
Microsoft |
CVE-2020-1400 |
7.0 |
2020-07-23 |
Microsoft Windows JET Database Engine Integer Underflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10895 |
Microsoft |
CVE-2020-1421 |
8.8 |
2020-07-23 |
Microsoft Windows LNK File Parsing Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-10875 |
Adobe |
CVE-2020-9680 |
7.8 |
2020-07-22 |
Adobe Prelude MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10874 |
Adobe |
CVE-2020-9679 |
3.3 |
2020-07-22 |
Adobe Prelude MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10873 |
Adobe |
CVE-2020-9678 |
7.8 |
2020-07-22 |
Adobe Prelude MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10872 |
Adobe |
CVE-2020-9677 |
7.8 |
2020-07-22 |
Adobe Prelude 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-10863 |
Adobe |
CVE-2020-9687 |
7.8 |
2020-07-22 |
Adobe Photoshop MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10862 |
Adobe |
CVE-2020-9686 |
3.3 |
2020-07-22 |
Adobe Photoshop MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10861 |
Adobe |
CVE-2020-9685 |
7.8 |
2020-07-22 |
Adobe Photoshop MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10860 |
Adobe |
CVE-2020-9684 |
7.8 |
2020-07-22 |
Adobe Photoshop MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10859 |
Adobe |
CVE-2020-9683 |
7.8 |
2020-07-22 |
Adobe Photoshop 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-10858 |
Adobe |
CVE-2020-9674 |
7.8 |
2020-07-22 |
Adobe Bridge MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10857 |
Adobe |
CVE-2020-9676 |
7.8 |
2020-07-22 |
Adobe Bridge MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10856 |
Adobe |
CVE-2020-9675 |
7.8 |
2020-07-22 |
Adobe Bridge 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-11107 |
Apple |
CVE-2020-9936 |
7.8 |
2020-07-21 |
Apple macOS decodePICT PIC Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10832 |
Apple |
CVE-2020-9894 |
4.3 |
2020-07-21 |
Apple Safari getAnimations Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10653 |
Apple |
CVE-2020-9884 |
7.8 |
2020-07-21 |
Apple macOS AudioToolboxCore CAF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10111 |
Apple |
CVE-2020-9893 |
7.5 |
2020-07-21 |
Apple Safari RenderWidget Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-10686 |
Microsoft |
3.3 |
2020-07-20 |
(0Day) Microsoft Windows hevcdecoder_store HEIC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-11274 |
Oracle |
CVE-2020-14703 |
6.0 |
2020-07-20 |
Oracle VirtualBox e1000 Unintialized Memory Information Disclosure Vulnerability |
|||
ZDI-CAN-11273 |
Oracle |
CVE-2020-14704 |
6.0 |
2020-07-20 |
Oracle VirtualBox BusLogicSCSI Uninitialized Memory Information Disclosure Vulnerability |
|||
ZDI-CAN-11140 |
Oracle |
CVE-2020-14700 |
5.3 |
2020-07-20 |
Oracle VirtualBox e1000 Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11138 |
Oracle |
CVE-2020-14699 |
7.5 |
2020-07-20 |
Oracle VirtualBox e1000 Integer Underflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-11137 |
Oracle |
CVE-2020-14698 |
5.3 |
2020-07-20 |
Oracle VirtualBox virtio-net Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11145 |
Oracle |
CVE-2020-14695 |
5.3 |
2020-07-20 |
Oracle VirtualBox BusLogicSCSI Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11142 |
Oracle |
CVE-2020-14694 |
5.3 |
2020-07-20 |
Oracle VirtualBox BusLogicSCSI Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-11028 |
Oracle |
CVE-2020-14673 |
5.3 |
2020-07-20 |
Oracle VirtualBox LsiLogicSCSI Time-Of-Check Time-Of-Use Information Disclosure Vulnerability |
|||
ZDI-CAN-10965 |
Oracle |
CVE-2020-14664 |
7.8 |
2020-07-20 |
Oracle Java Runtime Environment HTML Rendering Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10954 |
Oracle |
CVE-2020-14674 |
7.5 |
2020-07-20 |
Oracle VirtualBox LsiLogicSCSI Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
|||
ZDI-CAN-10900 |
Oracle |
CVE-2020-14675 |
7.5 |
2020-07-20 |
2021-03-02 |
Oracle VirtualBox PCnet Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
||
ZDI-CAN-10899 |
Oracle |
CVE-2020-14676 |
7.5 |
2020-07-20 |
2021-03-02 |
Oracle VirtualBox PCnet Out-Of-Bounds Access Privilege Escalation Vulnerability |
||
ZDI-CAN-10898 |
Oracle |
CVE-2020-14677 |
7.5 |
2020-07-20 |
2021-03-02 |
Oracle VirtualBox PCnet Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
||
ZDI-CAN-10978 |
Oracle |
CVE-2020-14650 |
5.3 |
2020-07-20 |
Oracle VirtualBox LsiLogicSCSI Time-Of-Check Time-Of-Use Information Disclosure Vulnerability |
|||
ZDI-CAN-10953 |
Oracle |
CVE-2020-14649 |
7.5 |
2020-07-20 |
Oracle VirtualBox LsiLogicSCSI Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
|||
ZDI-CAN-10952 |
Oracle |
CVE-2020-14647 |
7.5 |
2020-07-20 |
Oracle VirtualBox LsiLogicSCSI Out-Of-Bounds Write Privilege Escalation Vulnerability |
|||
ZDI-CAN-10951 |
Oracle |
CVE-2020-14648 |
5.3 |
2020-07-20 |
Oracle VirtualBox LsiLogicSCSI Time-Of-Check Time-Of-Use Information Disclosure Vulnerability |
|||
ZDI-CAN-10913 |
Oracle |
CVE-2020-14646 |
7.5 |
2020-07-20 |
Oracle VirtualBox LsiLogicSCSI Out-Of-Bounds Write Privilege Escalation Vulnerability |
|||
ZDI-CAN-10795 |
Oracle |
CVE-2020-14629 |
6.0 |
2020-07-20 |
2021-03-02 |
Oracle VirtualBox virtio-net Uninitialized Memory Information Disclosure Vulnerability |
||
ZDI-CAN-10762 |
Oracle |
CVE-2020-14628 |
8.2 |
2020-07-20 |
Oracle VirtualBox Guest Additions Unnecessary Privileges Local Privilege Escalation Vulnerability |
|||
ZDI-CAN-10741 |
Oracle |
CVE-2020-14625 |
9.8 |
2020-07-20 |
Oracle WebLogic Server T3 Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-10846 |
Adobe |
CVE-2020-9650 |
7.8 |
2020-07-20 |
Adobe Media Encoder MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10838 |
Adobe |
CVE-2020-9646 |
7.8 |
2020-07-20 |
Adobe Media Encoder MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10830 |
Adobe |
CVE-2020-9649 |
7.8 |
2020-07-20 |
Adobe Media Encoder 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-10835 |
D-Link |
CVE-2020-15633 |
8.8 |
2020-07-20 |
D-Link Multiple Routers HNAP GetCAPTCHAsetting Authentication Bypass Vulnerability |
|||
ZDI-CAN-10083 |
D-Link |
CVE-2020-15632 |
8.8 |
2020-07-20 |
D-Link DIR-842 HNAP GetCAPTCHAsetting Authentication Bypass Vulnerability |
|||
ZDI-CAN-10084 |
D-Link |
CVE-2020-15631 |
8.0 |
2020-07-20 |
D-Link DAP-1860 HNAP SOAPAction Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10767 |
IBM |
CVE-2020-4464 |
9.8 |
2020-07-20 |
IBM WebSphere Application Server SOAP Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-10903 |
Microsoft |
CVE-2020-1436 |
7.8 |
2020-07-16 |
Microsoft Windows PFB Font File Out-Of-Bounds Write Privilege Escalation Vulnerability |
|||
ZDI-CAN-10831 |
Microsoft |
CVE-2020-0987 |
3.3 |
2020-07-16 |
Microsoft Windows mf3216 EMF EMR_SETDIBITSTODEVICE Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10808 |
Microsoft |
CVE-2020-1355 |
6.3 |
2020-07-16 |
Microsoft Windows fontdrvhost Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10963 |
Microsoft |
CVE-2020-1439 |
8.8 |
2020-07-16 |
Microsoft SharePoint Scorecards Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-10781 |
Microsoft |
CVE-2020-1382 |
7.8 |
2020-07-16 |
(Pwn2Own) Microsoft Windows DirectComposition RemoveBindingManagerReferenceFromTrackerIfNecessary Use-After-Free Privilege Escalation Vulnerability |
|||
ZDI-CAN-10779 |
Microsoft |
CVE-2020-1381 |
7.8 |
2020-07-16 |
(Pwn2Own) Microsoft Windows DirectComposition SetBufferProperty Use-After-Free Privilege Escalation Vulnerability |
|||
ZDI-CAN-10977 |
Foxit |
CVE-2020-15630 |
3.3 |
2020-07-16 |
Foxit Studio Photo PNG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10764 |
Foxit |
CVE-2020-15629 |
7.8 |
2020-07-16 |
Foxit Studio Photo TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10716 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
Advantech iView TaskEditDeviceTable getTaskEditorSearchDevices SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10707 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
Advantech iView TaskEditDeviceTable updateSelected SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-10701 |
Advantech |
CVE-2020-14499 |
7.5 |
2020-07-16 |
Advantech iView UserServlet getAllUsersAccountInfo Improper Access Control Information Disclosure Vulnerability |
|||
ZDI-CAN-10708 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
Advantech iView TaskEditDeviceTable getDeviceCount SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10717 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
Advantech iView DeviceTreeTable getUpdateDeviceListDetails SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-10706 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
Advantech iView TaskEditDeviceTable clearTaskEditorTable SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-10704 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
Advantech iView TaskEditDeviceTable initTaskEditorSearchValues SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10703 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
Advantech iView User setUserAccountInfo SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-10702 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
Advantech iView User addUser SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-10700 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
Advantech iView User checkForDuplicateUserName SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10699 |
Advantech |
CVE-2020-14501 |
8.2 |
2020-07-16 |
Advantech iView UserServlet performDeleteUser Missing Authentication for Critical Function Information Disclosure Vulnerability |
|||
ZDI-CAN-10673 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
Advantech iView TaskEditDeviceTable updateDeviceAuthentication SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-10970 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
Advantech iView LinksTable deleteLinks SQL Injection Remote code Execution Vulnerability |
|||
ZDI-CAN-10672 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
Advantech iView DeviceTreeTable setDeviceAuthentication SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-10671 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
Advantech iView UpdateTable insertUpdateItem SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-10670 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
Advantech iView ZTPConfigTable findConfiguration SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10669 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
Advantech iView TaskEditDeviceTable updateSelectedPROMVersion SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-10668 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
Advantech iView DeviceTreeTable updateSegmentInfo SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-10661 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
Advantech iView ZTPConfigTable findConfiguration SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10660 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
Advantech iView TaskMgrTable getExportDataDetails SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10659 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
Advantech iView TaskMgrTable getExportData SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10631 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
Advantech iView NetworkServlet SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-10630 |
Advantech |
CVE-2020-14507 |
9.8 |
2020-07-16 |
Advantech iView LinksTable exportLinks Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-10629 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
Advantech iView TrapTable retrieveActiveTrapCount SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10628 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
Advantech iView DeviceTreeTable getInventoryReportData SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10627 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
Advantech iView TrapEventConfig retrieveDeviceTrapConfig SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10626 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
Advantech iView ConfigurationTable setConfigurationItem SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-10625 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
Advantech iView NetworkServlet SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10623 |
Advantech |
CVE-2020-14507 |
9.8 |
2020-07-16 |
Advantech iView NetworkServlet Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-10622 |
Advantech |
CVE-2020-14507 |
7.5 |
2020-07-16 |
Advantech iView MenuServlet Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-10621 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
Advantech iView UserServlet SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10658 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
Advantech iView DeviceTreeTable getInventoryExportData SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10657 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
Advantech iView PSTable getPSInventoryExportData SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10656 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
Advantech iView DeviceTreeTable updateNamingData SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-10655 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
Advantech iView SystemTable updateLDAPSettings SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-10646 |
Advantech |
CVE-2020-14503 |
9.8 |
2020-07-16 |
Advantech iView NetworkServlet Improper Input Validation Remote Code Execution Vulnerability |
|||
ZDI-CAN-10633 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
Advantech iView DeviceTreeTable checkForChassisUpdates SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10632 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
Advantech iView NetworkServlet SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-10645 |
Advantech |
CVE-2020-14505 |
9.8 |
2020-07-16 |
Advantech iView NetworkServlet restoreDatabase Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10637 |
Advantech |
CVE-2020-14497 |
7.5 |
2020-07-16 |
Advantech iView NetworkServlet SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-10636 |
Advantech |
CVE-2020-14507 |
7.5 |
2020-07-16 |
Advantech iView ZTPConfig importZtpConfiguration Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-10635 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
Advantech iView NetworkServlet SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10634 |
Advantech |
CVE-2020-14497 |
9.8 |
2020-07-16 |
Advantech iView LinksTable retrieveSearchLinks SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10586 |
Phoenix Contact |
CVE-2020-12498 |
7.8 |
2020-07-10 |
Phoenix Contact Automationworx PC WORX MWE File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-10147 |
Phoenix Contact |
CVE-2020-12497 |
7.8 |
2020-07-10 |
Phoenix Contact Automationworx PLCOpen XML File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10290 |
Rockwell Automation |
CVE-2020-12025 |
3.3 |
2020-07-09 |
2021-06-29 |
(0Day) (Pwn2Own) Rockwell Automation Studio 5000 AML File Parsing XML External Entity Processing Information Disclosure Vulnerability |
||
ZDI-CAN-10579 |
Apple |
CVE-2020-9815 |
3.3 |
2020-07-09 |
Apple macOS AudioToolboxCore CAF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10710 |
Veeam |
CVE-2020-15419 |
7.5 |
2020-07-08 |
Veeam ONE Reporter_ImportLicense Page_Load XML External Entity Processing Information Disclosure Vulnerability |
|||
ZDI-CAN-10709 |
Veeam |
CVE-2020-15418 |
7.5 |
2020-07-08 |
Veeam ONE SSRSReport GetCustomElementText XML External Entity Processing Information Disclosure Vulnerability |
|||
ZDI-CAN-10896 |
Microsoft |
CVE-2020-1457 |
7.8 |
2020-07-08 |
Microsoft Windows hevcdecoder_store HEIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10765 |
Microsoft |
CVE-2020-1425 |
7.8 |
2020-07-08 |
Microsoft Windows hevcdecoder_store HEIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10692 |
Microsoft |
CVE-2020-1425 |
7.8 |
2020-07-08 |
Microsoft Windows hevcdecoder_store HEIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10685 |
Microsoft |
CVE-2020-1425 |
3.3 |
2020-07-08 |
Microsoft Windows hevcdecoder_store HEIC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10684 |
Microsoft |
CVE-2020-1425 |
7.8 |
2020-07-08 |
Microsoft Windows hevcdecoder_store HEIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10936 |
Microsoft |
CVE-2020-1425 |
7.8 |
2020-07-07 |
Microsoft Windows hevcdecoder_store MKV File Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-10470 |
Rockwell Automation |
CVE-2019-13511 |
7.8 |
2020-07-07 |
Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-10374 |
Rockwell Automation |
CVE-2019-13511 |
7.8 |
2020-07-07 |
Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-10373 |
Rockwell Automation |
CVE-2019-13511 |
7.8 |
2020-07-07 |
Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-10129 |
Rockwell Automation |
CVE-2019-13511 |
7.8 |
2020-07-07 |
2021-06-29 |
Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability |
||
ZDI-CAN-10186 |
Rockwell Automation |
CVE-2019-13511 |
7.8 |
2020-07-07 |
Rockwell Automation Arena Simulation DOE File Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-10527 |
C-MORE |
CVE-2020-10922 |
7.5 |
2020-07-07 |
2020-07-08 |
C-MORE HMI EA9 EA-HTTP Improper Input Validation Denial-of-Service Vulnerability |
||
ZDI-CAN-10493 |
C-MORE |
CVE-2020-10920 |
9.8 |
2020-07-07 |
2020-07-08 |
C-MORE HMI EA9 Control Port Missing Authentication for Critical Function Remote Code Execution Vulnerability |
||
ZDI-CAN-10482 |
C-MORE |
CVE-2020-10921 |
9.8 |
2020-07-07 |
2020-07-08 |
C-MORE HMI EA9 EA-HTTP Missing Authentication for Critical Function Remote Code Execution Vulnerability |
||
ZDI-CAN-10185 |
C-MORE |
CVE-2020-10919 |
5.9 |
2020-07-07 |
2020-10-08 |
C-MORE HMI EA9 Weak Cryptography for Passwords Information Disclosure Vulnerability |
||
ZDI-CAN-10182 |
C-MORE |
CVE-2020-10918 |
7.5 |
2020-07-07 |
2020-11-24 |
C-MORE HMI EA9 Authentication Bypass Vulnerability |
||
ZDI-CAN-10690 |
Microsoft |
CVE-2020-1425 |
3.3 |
2020-07-07 |
Microsoft Windows hevcdecoder_store HEIC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10071 |
Check Point |
CVE-2020-6013 |
7.5 |
2020-07-02 |
Check Point ZoneAlarm Symlink Following Privilege Escalation Vulnerability |
|||
ZDI-CAN-10683 |
Microsoft |
CVE-2020-1425 |
3.3 |
2020-07-01 |
Microsoft Windows hevcdecoder_store HEIC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10687 |
Microsoft |
CVE-2020-1457 |
7.8 |
2020-07-01 |
Microsoft Windows hevcdecoder_store HEIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10273 |
ICONICS |
7.8 |
2020-07-01 |
(Pwn2Own) ICONICS Genesis64 PKGX Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability |
||||
ZDI-CAN-10471 |
Delta Industrial Automation |
3.3 |
2020-07-01 |
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing EnRcpNoName Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-10459 |
Delta Industrial Automation |
3.3 |
2020-07-01 |
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-10183 |
Delta Industrial Automation |
3.3 |
2020-07-01 |
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-10472 |
Delta Industrial Automation |
3.3 |
2020-07-01 |
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-10480 |
Delta Industrial Automation |
3.3 |
2020-07-01 |
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-10481 |
Delta Industrial Automation |
3.3 |
2020-07-01 |
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-10483 |
Delta Industrial Automation |
3.3 |
2020-07-01 |
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-10494 |
Delta Industrial Automation |
3.3 |
2020-07-01 |
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-10508 |
Delta Industrial Automation |
3.3 |
2020-07-01 |
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-10509 |
Delta Industrial Automation |
3.3 |
2020-07-01 |
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-10571 |
Delta Industrial Automation |
7.8 |
2020-07-01 |
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10572 |
Delta Industrial Automation |
3.3 |
2020-07-01 |
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-10184 |
Delta Industrial Automation |
3.3 |
2020-07-01 |
(0Day) Delta Industrial Automation DOPSoft DPA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-10891 |
VMware |
CVE-2020-3969 |
8.8 |
2020-06-30 |
2021-06-29 |
VMware Workstation SVGA3D Command Heap Overflow Privilege Escalation Vulnerability |
||
ZDI-CAN-10786 |
VMware |
CVE-2020-3962 |
8.2 |
2020-06-30 |
VMware Workstation SVGA DXInvalidateContext Use-After-Free Privilege Escalation Vulnerability |
|||
ZDI-CAN-10694 |
VMware |
CVE-2020-3967 |
7.5 |
2020-06-30 |
2021-03-02 |
VMware Workstation EHCI Heap-based Buffer Overflow Privilege Escalation Vulnerability |
||
ZDI-CAN-10608 |
VMware |
CVE-2020-3966 |
7.5 |
2020-06-30 |
2021-03-02 |
VMware Workstation EHCI Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
||
ZDI-CAN-10478 |
VMware |
CVE-2020-3970 |
2.8 |
2020-06-30 |
VMware Workstation Shader Bytecode Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10097 |
VMware |
CVE-2020-3968 |
8.2 |
2020-06-30 |
2021-03-02 |
VMware Workstation xHCI Isoch TD Out-Of-Bounds Write Privilege Escalation Vulnerability |
||
ZDI-CAN-10297 |
ICONICS |
CVE-2020-12015 |
9.8 |
2020-06-30 |
(Pwn2Own) ICONICS Genesis64 IcoFwxServer Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-10288 |
ICONICS |
CVE-2020-12013 |
9.8 |
2020-06-30 |
ICONICS Genesis64 TestQuery SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10274 |
ICONICS |
CVE-2020-12011 |
9.8 |
2020-06-30 |
(Pwn2Own) ICONICS Genesis64 VariantClear Out-Of-Bounds Access Remote Code Execution Vulnerability |
|||
ZDI-CAN-10272 |
ICONICS |
CVE-2020-12009 |
7.8 |
2020-06-30 |
(Pwn2Own) ICONICS Genesis64 PKGX WbPackAndGoSettings Absolute Path Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-10267 |
ICONICS |
CVE-2020-12007 |
5.3 |
2020-06-30 |
(Pwn2Own) ICONICS Genesis64 fwxserver Deserialization Denial-Of-Service Vulnerability |
|||
ZDI-CAN-9710 |
CentOS Web Panel |
CVE-2020-15628 |
7.5 |
2020-06-26 |
(0Day) CentOS Web Panel ajax_mail_autoreply user SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9738 |
CentOS Web Panel |
CVE-2020-15627 |
7.5 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_mail_autoreply account SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9730 |
CentOS Web Panel |
CVE-2020-15626 |
7.5 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_dashboard term SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9729 |
CentOS Web Panel |
CVE-2020-15625 |
7.5 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_add_mailbox username SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9727 |
CentOS Web Panel |
CVE-2020-15624 |
7.5 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_new_account domain SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9722 |
CentOS Web Panel |
CVE-2020-15623 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_mod_security archivo Arbitrary File Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9712 |
CentOS Web Panel |
CVE-2020-15622 |
7.5 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_mail_autoreply search SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9711 |
CentOS Web Panel |
CVE-2020-15621 |
7.5 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_mail_autoreply email SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9741 |
CentOS Web Panel |
CVE-2020-15620 |
7.5 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_list_accounts id SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9723 |
CentOS Web Panel |
CVE-2020-15619 |
7.5 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_list_accounts type SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9717 |
CentOS Web Panel |
CVE-2020-15618 |
7.5 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_list_accounts username SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9708 |
CentOS Web Panel |
CVE-2020-15617 |
7.5 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_list_accounts status SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9706 |
CentOS Web Panel |
CVE-2020-15616 |
7.5 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_list_accounts package SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9746 |
CentOS Web Panel |
CVE-2020-15615 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_ftp_manager Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9718 |
CentOS Web Panel |
CVE-2020-15614 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_php_pecl cha Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9739 |
CentOS Web Panel |
CVE-2020-15613 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_admin_apis line Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9737 |
CentOS Web Panel |
CVE-2020-15612 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_ftp_manager userLogin Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9734 |
CentOS Web Panel |
CVE-2020-15611 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_dashboard service_restart Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9728 |
CentOS Web Panel |
CVE-2020-15610 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_php_pecl modulo Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9726 |
CentOS Web Panel |
CVE-2020-15609 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_dashboard service_stop Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9724 |
CentOS Web Panel |
CVE-2020-15608 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_dashboard ai_service Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9721 |
CentOS Web Panel |
CVE-2020-15607 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_admin_apis line Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9720 |
CentOS Web Panel |
CVE-2020-15606 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_admin_apis Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9719 |
CentOS Web Panel |
CVE-2020-15435 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_dashboard service_start Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9745 |
CentOS Web Panel |
CVE-2020-15434 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_php_pecl canal Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9715 |
CentOS Web Panel |
CVE-2020-15433 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_php_pecl phpversion Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9743 |
CentOS Web Panel |
CVE-2020-15432 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_migration_cpanel filespace Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9740 |
CentOS Web Panel |
CVE-2020-15431 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_crons user Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9736 |
CentOS Web Panel |
CVE-2020-15430 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_list_accounts username Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9716 |
CentOS Web Panel |
CVE-2020-15429 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_crons user Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9714 |
CentOS Web Panel |
CVE-2020-15428 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_crons line Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9713 |
CentOS Web Panel |
CVE-2020-15427 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_disk_usage folderName Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9709 |
CentOS Web Panel |
CVE-2020-15426 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_migration_cpanel serverip Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9742 |
CentOS Web Panel |
CVE-2020-15425 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_mod_security Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9735 |
CentOS Web Panel |
CVE-2020-15424 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_mod_security domain Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9732 |
CentOS Web Panel |
CVE-2020-15423 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_mod_security dominio Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9731 |
CentOS Web Panel |
CVE-2020-15422 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_mod_security archivo Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9707 |
CentOS Web Panel |
CVE-2020-15421 |
9.8 |
2020-06-25 |
(0Day) CentOS Web Panel ajax_mod_security check_ip Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9259 |
CentOS Web Panel |
CVE-2020-15420 |
9.8 |
2020-06-25 |
2020-07-10 |
(0Day) CentOS Web Panel loader_ajax line Command Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-9607 |
NEC |
CVE-2020-27859 |
7.5 |
2020-06-25 |
2020-12-04 |
(0Day) NEC ESMPRO Manager GetEuaLogDownloadAction Directory Traversal Information Disclosure Vulnerability |
||
ZDI-CAN-10299 |
Rockwell Automation |
CVE-2020-12033 |
9.8 |
2020-06-22 |
(Pwn2Own) Rockwell Automation FactoryTalk View SE AddAgent Missing Authentication for Critical Function Remote Code Execution Vulnerability |
|||
ZDI-CAN-10298 |
Rockwell Automation |
9.8 |
2020-06-22 |
(Pwn2Own) Rockwell Automation FactoryTalk View SE RegisterEDSFiles Directory Traversal Remote Code Execution Vulnerability |
||||
ZDI-CAN-10292 |
Rockwell Automation |
CVE-2020-12001 |
9.8 |
2020-06-22 |
2020-06-23 |
(Pwn2Own) Rockwell Automation FactoryTalk Linx CopyRenameProject Directory Traversal Remote Code Execution Vulnerability |
||
ZDI-CAN-10291 |
Rockwell Automation |
CVE-2020-12027 |
5.3 |
2020-06-22 |
(Pwn2Own) Rockwell Automation Studio 5000 Version Missing Authentication for Critical Function Information Disclosure Vulnerability |
|||
ZDI-CAN-10270 |
Rockwell Automation |
CVE-2020-12031 |
7.8 |
2020-06-22 |
2021-06-29 |
(Pwn2Own) Rockwell Automation FactoryTalk View SE Project File Parsing Out-Of-Bounds Access Remote Code Execution Vulnerability |
||
ZDI-CAN-10284 |
Rockwell Automation |
CVE-2020-12029 |
9.8 |
2020-06-22 |
(Pwn2Own) Rockwell Automation FactoryTalk View SE Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-10283 |
Rockwell Automation |
CVE-2020-12028 |
7.3 |
2020-06-22 |
2021-06-29 |
(Pwn2Own) Rockwell Automation FactoryTalk View SE Backup Missing Authentication for Critical Function Vulnerability |
||
ZDI-CAN-10282 |
Rockwell Automation |
CVE-2020-12027 |
5.3 |
2020-06-22 |
2021-06-29 |
(Pwn2Own) Rockwell Automation FactoryTalk View SE GetHMIProjectPaths Missing Authentication for Critical Function Information Disclosure Vulnerability |
||
ZDI-CAN-10281 |
Rockwell Automation |
CVE-2020-12027 |
5.3 |
2020-06-22 |
2021-06-29 |
(Pwn2Own) Rockwell Automation FactoryTalk View SE GetHMIProjects Missing Authentication for Critical Function Information Disclosure Vulnerability |
||
ZDI-CAN-10877 |
Adobe |
CVE-2020-9662 |
7.8 |
2020-06-18 |
Adobe After Effects MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10878 |
Adobe |
CVE-2020-9660 |
7.8 |
2020-06-18 |
Adobe After Effects MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10876 |
Adobe |
CVE-2020-9661 |
7.8 |
2020-06-18 |
Adobe After Effects 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-10868 |
Adobe |
CVE-2020-9655 |
7.8 |
2020-06-18 |
Adobe Premiere Rush 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-10869 |
Adobe |
CVE-2020-9656 |
7.8 |
2020-06-18 |
Adobe Premiere Rush MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10870 |
Adobe |
CVE-2020-9657 |
7.8 |
2020-06-18 |
Adobe Premiere Rush MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10854 |
Adobe |
CVE-2020-9659 |
7.8 |
2020-06-18 |
Adobe Audition MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10853 |
Adobe |
CVE-2020-9658 |
7.8 |
2020-06-18 |
Adobe Audition MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10864 |
Adobe |
CVE-2020-9652 |
7.8 |
2020-06-18 |
Adobe Premiere Pro 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-10865 |
Adobe |
CVE-2020-9653 |
7.8 |
2020-06-18 |
Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10866 |
Adobe |
CVE-2020-9654 |
7.8 |
2020-06-18 |
Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10074 |
Docker |
7.8 |
2020-06-15 |
Docker Desktop Execution with Unnecessary Privileges Privilege Escalation Vulnerability |
||||
ZDI-CAN-10277 |
Inductive Automation |
5.3 |
2020-06-15 |
(0Day) (Pwn2Own) Inductive Automation Ignition ServerMessageHeader Deserialization of Untrusted Data Information Disclosure Vulnerability |
||||
ZDI-CAN-9756 |
NETGEAR |
6.3 |
2020-06-15 |
(0Day) NETGEAR R6700 httpd strtblupgrade Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-9703 |
NETGEAR |
8.8 |
2020-06-15 |
(0Day) NETGEAR R6700 httpd Firmware Upload Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-9618 |
NETGEAR |
6.5 |
2020-06-15 |
(0Day) NETGEAR R6700 httpd Improper Access Control Information Disclosure Vulnerability |
||||
ZDI-CAN-9751 |
IBM |
CVE-2020-4216 |
7.3 |
2020-06-15 |
IBM Spectrum Protect Plus Hardcoded Username And Password Authentication Bypass Vulnerability |
|||
ZDI-CAN-9768 |
NETGEAR |
8.8 |
2020-06-15 |
(0Day) NETGEAR R6700 httpd strtblupgrade Integer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-9767 |
NETGEAR |
8.4 |
2020-06-15 |
(0Day) NETGEAR R6700 httpd strtblupgrade Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-9649 |
NETGEAR |
7.5 |
2020-06-15 |
(0Day) (Pwn2Own) NETGEAR R6700 check_ra Use of a Broken or Risky Cryptographic Algorithm Remote Code Execution Vulnerability |
||||
ZDI-CAN-9648 |
NETGEAR |
7.5 |
2020-06-15 |
(0Day) (Pwn2Own) NETGEAR R6700 check_ra Download of Code Without Integrity Check Remote Code Execution Vulnerability |
||||
ZDI-CAN-9647 |
NETGEAR |
7.5 |
2020-06-15 |
(0Day) (Pwn2Own) NETGEAR R6700 check_ra Improper Certificate Validation Remote Code Execution Vulnerability |
||||
ZDI-CAN-9643 |
NETGEAR |
CVE-2020-10924 |
8.8 |
2020-06-15 |
(0Day) (Pwn2Own) NETGEAR R6700 UPnP NewBlockSiteName Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9642 |
NETGEAR |
6.5 |
2020-06-15 |
(0Day) (Pwn2Own) NETGEAR R6700 UPnP SOAPAction Authentication Bypass Vulnerability |
||||
ZDI-CAN-10005 |
McAfee |
CVE-2020-7280 |
7.8 |
2020-06-15 |
McAfee VirusScan Enterprise Junction Privilege Escalation Vulnerability |
|||
ZDI-CAN-10776 |
Apple |
5.3 |
2020-06-09 |
2021-06-29 |
(0Day) (Pwn2Own) Apple macOS Quarantine Attribute Bypass Vulnerability |
|||
ZDI-CAN-10592 |
Adobe |
CVE-2020-9634 |
7.8 |
2020-06-09 |
Adobe FrameMaker GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10576 |
Adobe |
CVE-2020-9635 |
7.8 |
2020-06-09 |
Adobe FrameMaker PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10788 |
Microsoft |
CVE-2020-1219 |
7.5 |
2020-06-09 |
Microsoft Chakra Intl Object Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-10681 |
Microsoft |
CVE-2020-1239 |
8.8 |
2020-06-09 |
Microsoft Windows Media Player mpg2splt Integer Underflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10693 |
Microsoft |
CVE-2020-1238 |
8.8 |
2020-06-09 |
Microsoft Windows Media Foundation Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10654 |
Microsoft |
CVE-2020-1238 |
8.8 |
2020-06-09 |
Microsoft Windows Media Foundation Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10589 |
Microsoft |
CVE-2020-1181 |
8.8 |
2020-06-09 |
Microsoft SharePoint Server Web Part Remote Code Execution Vulnerability |
|||
ZDI-CAN-10512 |
Microsoft |
CVE-2020-1232 |
4.3 |
2020-06-09 |
Microsoft Windows Media Player DTS Stream Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10033 |
Microsoft |
CVE-2020-1207 |
8.8 |
2020-06-09 |
Microsoft Windows win32kfull PDEVOBJ Use-After-Free Privilege Escalation Vulnerability |
|||
ZDI-CAN-11127 |
ManageEngine |
CVE-2020-13818 |
7.5 |
2020-06-09 |
ManageEngine OpManager OpmSkipFilter Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-10756 |
IBM |
CVE-2020-4449 |
7.5 |
2020-06-05 |
IBM WebSphere Application Server IIOP Deserialization of Untrusted Data Information Disclosure Vulnerability |
|||
ZDI-CAN-10749 |
IBM |
CVE-2020-4450 |
9.8 |
2020-06-05 |
IBM WebSphere Application Server IIOP Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-10732 |
IBM |
CVE-2020-4448 |
9.8 |
2020-06-05 |
2020-09-21 |
IBM WebSphere UploadFileArgument Directory Traversal Remote Code Execution Vulnerability |
||
ZDI-CAN-10278 |
Inductive Automation |
CVE-2020-12000 |
9.8 |
2020-06-01 |
(Pwn2Own) Inductive Automation Ignition ServerMessageHeader Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-10276 |
Inductive Automation |
CVE-2020-10644 |
9.8 |
2020-06-01 |
2021-06-29 |
(Pwn2Own) Inductive Automation Ignition getDiffs Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
||
ZDI-CAN-10275 |
Inductive Automation |
CVE-2020-12004 |
5.3 |
2020-06-01 |
2021-06-29 |
(Pwn2Own) Inductive Automation Ignition getDiffs Missing Authentication for Critical Function Information Disclosure Vulnerability |
||
ZDI-CAN-10007 |
NEC |
CVE-2020-10917 |
9.8 |
2020-06-01 |
NEC ESMPRO Manager RMI Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-10077 |
Apple |
CVE-2020-9841 |
5.3 |
2020-05-28 |
Apple macOS SkyLight Integer Overflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-10504 |
Apple |
CVE-2020-9800 |
8.8 |
2020-05-28 |
Apple Safari HasIndexedProperty Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-10777 |
Apple |
CVE-2020-9839 |
7.8 |
2020-05-28 |
(Pwn2Own) Apple macOS cfprefsd Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
|||
ZDI-CAN-10775 |
Apple |
CVE-2020-9856 |
5.3 |
2020-05-28 |
(Pwn2Own) Apple macOS Core Virtual Machine Service Heap-based Buffer Overflow Vulnerability |
|||
ZDI-CAN-10774 |
Apple |
CVE-2020-9801 |
5.3 |
2020-05-28 |
(Pwn2Own) Apple Safari Symbolic Link Arbitrary Application Execution Vulnerability |
|||
ZDI-CAN-10329 |
Trend Micro |
CVE-2020-8604 |
7.5 |
2020-05-27 |
2020-05-28 |
Trend Micro InterScan Web Security Virtual Appliance Apache Solr Directory Traversal Information Disclosure Vulnerability |
||
ZDI-CAN-10117 |
Trend Micro |
CVE-2020-8606 |
9.8 |
2020-05-27 |
2020-05-28 |
Trend Micro InterScan Web Security Virtual Appliance Apache Solr Authentication Bypass Vulnerability |
||
ZDI-CAN-10095 |
Trend Micro |
CVE-2020-8605 |
8.8 |
2020-05-27 |
2020-05-28 |
Trend Micro InterScan Web Security Virtual Appliance Command Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-10088 |
Trend Micro |
CVE-2020-8603 |
6.3 |
2020-05-27 |
2020-05-28 |
Trend Micro InterScan Web Security Virtual Appliance Cross-Site Scripting Vulnerability |
||
ZDI-CAN-10652 |
Apple |
CVE-2020-9815 |
7.8 |
2020-05-27 |
Apple macOS AudioToolboxCore CAF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10651 |
Apple |
CVE-2020-9816 |
7.8 |
2020-05-27 |
Apple macOS libFontParser Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10773 |
Apple |
CVE-2020-9850 |
7.3 |
2020-05-27 |
(Pwn2Own) Apple Safari In Operator JIT Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-10581 |
Apple |
CVE-2020-9791 |
3.3 |
2020-05-27 |
Apple macOS AudioToolboxCore AIFF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10871 |
Adobe |
CVE-2020-9617 |
3.3 |
2020-05-25 |
Adobe Premiere Rush MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10867 |
Adobe |
CVE-2020-9616 |
3.3 |
2020-05-25 |
Adobe Premiere Pro MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10879 |
Adobe |
CVE-2020-9586 |
7.8 |
2020-05-25 |
Adobe Character Animator EPS BoundingBox Element Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10855 |
Adobe |
CVE-2020-9618 |
3.3 |
2020-05-25 |
Adobe Audition MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10037 |
Microsoft |
7.0 |
2020-05-19 |
2020-07-20 |
(0Day) Microsoft Windows WLAN Connection Profile Missing Authentication Privilege Escalation Vulnerability |
|||
ZDI-CAN-10016 |
Microsoft |
CVE-2020-0916 |
7.0 |
2020-05-19 |
(0Day) Microsoft Windows splwow64 Untrusted Pointer Dereference Privilege Escalation Vulnerability |
|||
ZDI-CAN-10012 |
Microsoft |
CVE-2020-0915 |
2.5 |
2020-05-19 |
(0Day) Microsoft Windows splwow64 Untrusted Pointer Dereference Information Disclosure Vulnerability |
|||
ZDI-CAN-9851 |
Microsoft |
CVE-2020-0986 |
7.0 |
2020-05-19 |
(0Day) Microsoft Windows splwow64 Untrusted Pointer Dereference Privilege Escalation Vulnerability |
|||
ZDI-CAN-10014 |
Microsoft |
CVE-2020-0915 |
7.0 |
2020-05-19 |
(0Day) Microsoft Windows splwow64 Untrusted Pointer Dereference Privilege Escalation Vulnerability |
|||
ZDI-CAN-10850 |
FreeBSD |
CVE-2020-7455 |
4.1 |
2020-05-19 |
FreeBSD Kernel NAT Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10849 |
FreeBSD |
CVE-2020-7454 |
9.8 |
2020-05-19 |
FreeBSD Kernel NAT Out-Of-Bounds Access Remote Code Execution Vulnerability |
|||
ZDI-CAN-10624 |
FreeBSD |
CVE-2020-7454 |
9.8 |
2020-05-19 |
FreeBSD Kernel NAT Out-Of-Bounds Access Remote Code Execution Vulnerability |
|||
ZDI-CAN-10287 |
Schneider Electric |
CVE-2020-7493 |
7.8 |
2020-05-14 |
2021-06-29 |
Schneider Electric EcoStruxure Operator Terminal Expert VXDZ File Parsing Directory Traversal Remote Code Execution Vulnerability |
||
ZDI-CAN-10280 |
Schneider Electric |
CVE-2020-7495 |
7.8 |
2020-05-14 |
(Pwn2Own) Schneider Electric EcoStructure Operator Terminal Expert ZIP Path Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-10279 |
Schneider Electric |
CVE-2020-7494 |
7.8 |
2020-05-14 |
(Pwn2Own) Schneider Electric EcoStructure Operator Terminal Expert VXDZ Arbitrary Library Load Remote Code Execution Vulnerability |
|||
ZDI-CAN-10017 |
Advantech |
CVE-2020-12019 |
7.8 |
2020-05-14 |
(0Day) Advantech WebAccess Node Incorrect Permission Assignment Privilege Escalation Vulnerability |
|||
ZDI-CAN-9779 |
Advantech |
CVE-2020-12019 |
9.8 |
2020-05-14 |
(0Day) Advantech WebAccess Node DATACORE Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10822 |
Adobe |
CVE-2020-9612 |
7.0 |
2020-05-12 |
Adobe Acrobat Reader DC JPEG2000 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10106 |
Adobe |
CVE-2020-9597 |
7.8 |
2020-05-12 |
Adobe Acrobat Reader DC JPEG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10784 |
Adobe |
CVE-2020-9606 |
7.3 |
2020-05-12 |
2020-08-18 |
(Pwn2Own) Adobe Acrobat Reader DC Field Use-After-Free Remote Code Execution Vulnerability |
||
ZDI-CAN-11085 |
Eaton |
CVE-2020-6652 |
7.8 |
2020-05-12 |
2020-05-12 |
Eaton Intelligent Power Manager mc2 Incorrect Privilege Assignment Privilege Escalation Vulnerability |
||
ZDI-CAN-9854 |
Eaton |
CVE-2020-6651 |
8.8 |
2020-05-12 |
Eaton Intelligent Power Manager mc2 Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-10124 |
Microsoft |
CVE-2020-1102 |
8.8 |
2020-05-12 |
Microsoft SharePoint Shared Forms Incomplete Blacklist Remote Code Execution Vulnerability |
|||
ZDI-CAN-10743 |
Microsoft |
CVE-2020-0987 |
4.3 |
2020-05-12 |
Microsoft Windows EMF EMR_SETDIBITSTODEVICE Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10785 |
Microsoft |
CVE-2020-1135 |
8.8 |
2020-05-12 |
(Pwn2Own) Microsoft Windows DirectComposition SetReferenceArrayProperty Use-After-Free Privilege Escalation Vulnerability |
|||
ZDI-CAN-10397 |
Microsoft |
CVE-2020-1062 |
8.8 |
2020-05-12 |
Microsoft Internet Explorer JScript Garbage Collection Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-10566 |
Microsoft |
CVE-2020-1126 |
8.8 |
2020-05-12 |
Microsoft Windows Media Player HEVC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10569 |
Microsoft |
CVE-2020-1126 |
8.8 |
2020-05-12 |
Microsoft Windows Media Player HEVC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10516 |
Microsoft |
CVE-2020-1028 |
8.8 |
2020-05-12 |
Microsoft Windows Media Player HEVC Stream Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10381 |
Microsoft |
CVE-2020-1096 |
9.6 |
2020-05-12 |
Microsoft Windows PDF Library DirectWrite Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-10039 |
Microsoft |
CVE-2020-1051 |
7.8 |
2020-05-12 |
Microsoft Windows JET Database Engine Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-10103 |
Microsoft |
CVE-2020-1150 |
7.5 |
2020-05-12 |
Microsoft Internet Explorer CWMPErrorDlg Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-10064 |
Microsoft |
CVE-2020-1176 |
7.8 |
2020-05-12 |
Microsoft Windows JET Database Engine Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-10056 |
Microsoft |
CVE-2020-1174 |
7.8 |
2020-05-12 |
Microsoft Windows JET Database Engine Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-10060 |
Microsoft |
CVE-2020-1175 |
7.8 |
2020-05-12 |
Microsoft Windows JET Database Engine Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-10026 |
Advantech |
CVE-2020-10638 |
8.1 |
2020-05-08 |
Advantech WebAccess/SCADA BwBacNetJ Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10080 |
Advantech |
CVE-2020-12002 |
8.1 |
2020-05-08 |
Advantech WebAccess/SCADA BwBacNetJ Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10079 |
Advantech |
CVE-2020-12002 |
8.1 |
2020-05-08 |
Advantech WebAccess/SCADA BwBacNetJ Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10325 |
Advantech |
9.8 |
2020-05-08 |
Advantech WebAccess IOCTL 0x2711 bwscrp Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-9892 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA BwWebSvc IOCTL 0x00013c80 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9896 |
Advantech |
CVE-2020-12018 |
7.5 |
2020-05-08 |
Advantech WebAccess/SCADA DrawSrv IOCTL 0x00002722 Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9940 |
Advantech |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA DATACORE IOCTL 0x5217 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-9903 |
Advantech |
CVE-2020-12018 |
7.5 |
2020-05-08 |
Advantech WebAccess/SCADA ViewSrv IOCTL 0x00002722 Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9899 |
Advantech |
CVE-2020-12026 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA DrawSrv IOCTL 0x0000277d Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-9907 |
Advantech |
CVE-2020-12026 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA ViewSrv IOCTL 0x0000277d Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-10339 |
Advantech |
CVE-2020-12002 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA SyntecUA Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10338 |
Advantech |
CVE-2020-12002 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA OPCUA Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10337 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA ModDuDrv Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10086 |
Advantech |
CVE-2020-12002 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA GpsET200 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10085 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA BwTCPIP Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10081 |
Advantech |
CVE-2020-10638 |
8.1 |
2020-05-08 |
Advantech WebAccess/SCADA BwTCPIP Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10025 |
Advantech |
CVE-2020-12002 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA BacNetDrvJ Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9891 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA BwWebSvc IOCTL 0x00013c84 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9890 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA BwWebSvc IOCTL 0x00013c7b Integer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9889 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA BwWebSvc IOCTL 0x00013c77 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9884 |
Advantech |
CVE-2020-12014 |
7.5 |
2020-05-08 |
Advantech WebAccess/SCADA BwWebSvc IOCTL 0x00013c76 IOCTL 0x00013c77 SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9883 |
Advantech |
CVE-2020-12014 |
7.5 |
2020-05-08 |
Advantech WebAccess/SCADA BwWebSvc IOCTL 0x00013c74 IOCTL 0x00013c75 SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9882 |
Advantech |
CVE-2020-12014 |
7.5 |
2020-05-08 |
Advantech WebAccess/SCADA BwWebSvc IOCTL 0x00013c71 SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9948 |
Advantech |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA DATACORE IOCTL 0x5218 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-9947 |
Advantech |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA DATACORE IOCTL 0x521B Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-9941 |
Advantech |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA DATACORE IOCTL 0x520B Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-9939 |
Advantech |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA DATACORE IOCTL 0x5213 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-9938 |
Advantech |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA DATACORE IOCTL 0x5208 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-9936 |
Advantech |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA DATACORE IOCTL 0x5209 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-9935 |
Advantech |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA DATACORE IOCTL 0x520B Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-9901 |
Advantech |
CVE-2020-12006 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA DrawSrv IOCTL 0x00002711 Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9898 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA DrawSrv IOCTL 0x00002774 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9897 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA DrawSrv IOCTL 0x00002723 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9895 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA DrawSrv IOCTL 0x00002775 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9998 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA DATACORE IOCTL 0x0000791d Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9997 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA DATACORE IOCTL 0x0000791e Integer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9994 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA DATACORE IOCTL 0x0000791c Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9988 |
Advantech |
CVE-2020-12022 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA DATACORE IOCTL 0x0000521e Improper Validation of Array Index Remote Code Execution Vulnerability |
|||
ZDI-CAN-9985 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA DATACORE IOCTL 0x00005226 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9908 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA ViewSrv IOCTL 0x00002775 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9905 |
Advantech |
CVE-2020-12006 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA ViewSrv IOCTL 0x00002711 Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9904 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA ViewSrv IOCTL 0x00002774 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9902 |
Advantech |
CVE-2020-10638 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA ViewSrv IOCTL 0x00002723 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9906 |
Advantech |
CVE-2020-12002 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA DATACORE IOCTL 0x00005227 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9996 |
Advantech |
CVE-2020-12002 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA DATACORE IOCTL 0x0000791e Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-9987 |
Advantech |
CVE-2020-12002 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA DATACORE IOCTL 0x00005241 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9995 |
Advantech |
CVE-2020-12006 |
9.8 |
2020-05-08 |
Advantech WebAccess/SCADA DATACORE IOCTL 0x0000791e Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-10377 |
Schneider Electric |
CVE-2020-10626 |
7.8 |
2020-05-06 |
Schneider Electric EcoStruxure IT Gateway Improper Access Control Privilege Escalation Vulnerability |
|||
ZDI-CAN-9859 |
Apple |
CVE-2020-3915 |
7.8 |
2020-05-06 |
Apple macOS printtool Daemon Improper Input Validation Privilege Escalation Vulnerability |
|||
ZDI-CAN-9973 |
Trading Technologies |
9.8 |
2020-05-06 |
Trading Technologies X_TRADER remove_park Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-9972 |
Trading Technologies |
9.8 |
2020-05-06 |
Trading Technologies X_TRADER disconnect_proxy_site Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-9971 |
Trading Technologies |
9.8 |
2020-05-06 |
Trading Technologies X_TRADER block_proxy_site Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-9970 |
Trading Technologies |
9.8 |
2020-05-06 |
Trading Technologies X_TRADER unblock_proxy_site Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10783 |
Oracle |
CVE-2020-2575 |
7.8 |
2020-04-30 |
(Pwn2Own) Oracle VirtualBox OHCI Uninitialized Variable Privilege Escalation Vulnerability |
|||
ZDI-CAN-10782 |
Oracle |
CVE-2020-2894 |
5.5 |
2020-04-30 |
(Pwn2Own) Oracle VirtualBox E1000 IP Checksum Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10035 |
Adobe |
CVE-2020-9568 |
7.8 |
2020-04-30 |
Adobe Bridge DCM File Parsing Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-10090 |
Adobe |
CVE-2020-3765 |
7.8 |
2020-04-30 |
2020-07-20 |
Adobe After Effects MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||
ZDI-CAN-10402 |
Microsoft |
CVE-2020-0744 |
3.3 |
2020-04-30 |
Microsoft Windows user32 DIB Scaling Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10321 |
LAquis |
CVE-2020-10622 |
5.5 |
2020-04-30 |
LAquis SCADA LGX File Insufficient UI Warning Information Disclosure Vulnerability |
|||
ZDI-CAN-10320 |
LAquis |
CVE-2020-10622 |
5.5 |
2020-04-30 |
LAquis SCADA LGX File Insufficient UI Warning Information Disclosure Vulnerability |
|||
ZDI-CAN-10319 |
LAquis |
CVE-2020-10618 |
7.8 |
2020-04-30 |
LAquis SCADA LGX File Insufficient UI Warning Arbitrary File Creation Vulnerability |
|||
ZDI-CAN-10316 |
LAquis |
CVE-2020-10618 |
7.8 |
2020-04-30 |
LAquis SCADA LGX File Insufficient UI Warning Arbitrary File Creation Vulnerability |
|||
ZDI-CAN-10197 |
LAquis |
CVE-2020-10618 |
7.8 |
2020-04-30 |
LAquis SCADA LGX File Insufficient UI Warning Arbitrary File Creation Vulnerability |
|||
ZDI-CAN-10318 |
LAquis |
CVE-2020-10618 |
7.8 |
2020-04-30 |
LAquis SCADA LGX File Insufficient UI Warning Arbitrary File Creation Vulnerability |
|||
ZDI-CAN-10317 |
LAquis |
CVE-2020-10618 |
7.8 |
2020-04-30 |
LAquis SCADA LGX File Insufficient UI Warning Arbitrary File Creation Vulnerability |
|||
ZDI-CAN-10492 |
Oracle |
CVE-2020-2883 |
9.8 |
2020-04-30 |
Oracle WebLogic Server T3 Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-10018 |
Adobe |
CVE-2020-9553 |
3.3 |
2020-04-30 |
Adobe Bridge TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10048 |
Adobe |
CVE-2020-9565 |
7.8 |
2020-04-28 |
Adobe Bridge PostScript callothersubr Command Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10066 |
Adobe |
CVE-2020-9567 |
3.3 |
2020-04-28 |
Adobe Bridge TTF File Parsing Use-After-Free Information Disclosure Vulnerability |
|||
ZDI-CAN-10067 |
Adobe |
CVE-2020-9554 |
7.8 |
2020-04-28 |
Adobe Bridge GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10052 |
Adobe |
CVE-2020-9555 |
7.8 |
2020-04-28 |
2021-03-02 |
Adobe Bridge EPS BoundingBox Element Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||
ZDI-CAN-10049 |
Adobe |
CVE-2020-9556 |
7.8 |
2020-04-28 |
2021-03-02 |
Adobe Bridge PostScript put Command Out-Of-Bounds Write Remote Code Execution Vulnerability |
||
ZDI-CAN-10040 |
Adobe |
CVE-2020-9557 |
7.8 |
2020-04-28 |
Adobe Bridge PostScript blend Command Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-10041 |
Adobe |
CVE-2020-9558 |
3.3 |
2020-04-28 |
Adobe Bridge PostScript File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10042 |
Adobe |
CVE-2020-9560 |
7.8 |
2020-04-28 |
Adobe Bridge PostScript drop Command Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10043 |
Adobe |
CVE-2020-9559 |
7.8 |
2020-04-28 |
Adobe Bridge PostScript load Command Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10044 |
Adobe |
CVE-2020-9561 |
7.8 |
2020-04-28 |
Adobe Bridge PostScript callothersubr Command Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10045 |
Adobe |
CVE-2020-9562 |
7.8 |
2020-04-28 |
Adobe Bridge PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10046 |
Adobe |
CVE-2020-9563 |
7.8 |
2020-04-28 |
Adobe Bridge PostScript CharString Directory Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10047 |
Adobe |
CVE-2020-9564 |
7.8 |
2020-04-28 |
Adobe Bridge PostScript hsbw Command Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10109 |
Adobe |
CVE-2020-9569 |
7.8 |
2020-04-28 |
Adobe Bridge TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10094 |
Adobe |
CVE-2020-9566 |
7.8 |
2020-04-28 |
Adobe Bridge PostScript File Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-10003 |
TP-Link |
CVE-2020-10916 |
8.0 |
2020-04-28 |
TP-Link TL-WA855RE login.json Improper Authentication Privilege Escalation Vulnerability |
|||
ZDI-CAN-10378 |
Microsoft |
CVE-2020-0744 |
3.3 |
2020-04-23 |
Microsoft Windows gdi32full StretchDIBitsImpl Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10410 |
Oracle |
CVE-2020-2911 |
7.5 |
2020-04-20 |
Oracle VirtualBox vmsvga3dSetLightData Out-Of-Bounds Write Privilege Escalation Vulnerability |
|||
ZDI-CAN-10096 |
Oracle |
CVE-2020-2701 |
7.5 |
2020-04-20 |
2021-03-02 |
Oracle VirtualBox xHCI Heap-based Buffer Overflow Privilege Escalation Vulnerability |
||
ZDI-CAN-10301 |
Triangle MicroWorks |
CVE-2020-10611 |
9.8 |
2020-04-16 |
(Pwn2Own) Triangle MicroWorks SCADA Data Gateway DNP3 Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-10300 |
Triangle MicroWorks |
CVE-2020-10613 |
5.3 |
2020-04-16 |
(Pwn2Own) Triangle MicroWorks SCADA Data Gateway DNP3 Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10266 |
Triangle MicroWorks |
CVE-2020-10615 |
9.8 |
2020-04-16 |
2020-04-16 |
(Pwn2Own) Triangle Microworks SCADA Data Gateway DNP3 GET_FILE_INFO Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||
ZDI-CAN-10401 |
Veeam |
CVE-2020-10915 |
9.8 |
2020-04-16 |
2020-05-14 |
Veeam ONE HandshakeResult Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||
ZDI-CAN-10400 |
Veeam |
CVE-2020-10914 |
9.8 |
2020-04-16 |
2020-05-14 |
Veeam ONE PerformHandshake Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||
ZDI-CAN-9604 |
Cisco |
CVE-2020-3249 |
8.2 |
2020-04-16 |
Cisco UCS Director saveWindowsNetworkConfig Directory Traversal Denial-of-Service Vulnerability |
|||
ZDI-CAN-9596 |
Cisco |
CVE-2020-3248 |
9.8 |
2020-04-16 |
Cisco UCS Director saveStaticConfig Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-9565 |
Cisco |
CVE-2020-3240 |
9.8 |
2020-04-16 |
Cisco UCS Director ScriptModuleAddJarPage Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-9593 |
Cisco |
CVE-2020-3247 |
9.8 |
2020-04-16 |
Cisco UCS Director CopyFileRunnable run Symlink Following Remote Code Execution Vulnerability |
|||
ZDI-CAN-9559 |
Cisco |
CVE-2020-3243 |
9.8 |
2020-04-16 |
Cisco UCS Director isEnableRestKeyAccessCheckForUser Authentication Bypass Vulnerability |
|||
ZDI-CAN-9586 |
Cisco |
CVE-2020-3239 |
9.8 |
2020-04-16 |
Cisco UCS Director ApplianceStorageUtil unzip Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-9557 |
Cisco |
CVE-2020-3250 |
7.5 |
2020-04-16 |
Cisco UCS Director downloadFile Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-9644 |
Amazon |
8.8 |
2020-04-16 |
(Pwn2Own) Amazon Echo Show Integer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10295 |
OPC Foundation |
CVE-2020-8867 |
5.3 |
2020-04-16 |
2021-06-29 |
(Pwn2Own) OPC Foundation UA .NET Standard CreateSessionRequest Race Condition Denial-of-Service Vulnerability |
||
ZDI-CAN-10650 |
Foxit |
CVE-2020-10907 |
7.8 |
2020-04-16 |
Foxit Reader XFA Widget Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-10614 |
Foxit |
CVE-2020-10906 |
7.8 |
2020-04-16 |
Foxit Reader resetForm Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-10568 |
Foxit |
CVE-2020-10905 |
3.3 |
2020-04-16 |
Foxit PhantomPDF U3D File Parsing vertex Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10464 |
Foxit |
CVE-2020-10904 |
7.8 |
2020-04-16 |
Foxit PhantomPDF U3DBrowser U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10463 |
Foxit |
CVE-2020-10903 |
3.3 |
2020-04-16 |
Foxit PhantomPDF U3DBrowser U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10462 |
Foxit |
CVE-2020-10902 |
7.8 |
2020-04-16 |
Foxit PhantomPDF U3DBrowser U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-10461 |
Foxit |
CVE-2020-10901 |
3.3 |
2020-04-16 |
Foxit PhantomPDF U3DBrowser U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10142 |
Foxit |
CVE-2020-10900 |
7.8 |
2020-04-16 |
Foxit Reader AcroForm Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-10132 |
Foxit |
CVE-2020-10899 |
7.8 |
2020-04-16 |
Foxit Reader XFA Template Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-10195 |
Foxit |
CVE-2020-10898 |
7.8 |
2020-04-16 |
Foxit PhantomPDF U3DBrowser U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-10193 |
Foxit |
CVE-2020-10897 |
7.8 |
2020-04-16 |
Foxit PhantomPDF U3DBrowser U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10192 |
Foxit |
CVE-2020-10896 |
7.8 |
2020-04-16 |
Foxit PhantomPDF U3DBrowser U3D File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10191 |
Foxit |
CVE-2020-10895 |
7.8 |
2020-04-16 |
Foxit PhantomPDF U3DBrowser U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-10190 |
Foxit |
CVE-2020-10894 |
3.3 |
2020-04-16 |
Foxit PhantomPDF U3DBrowser U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10189 |
Foxit |
CVE-2020-10893 |
7.8 |
2020-04-16 |
Foxit PhantomPDF U3DBrowser U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9946 |
Foxit |
CVE-2020-10913 |
7.8 |
2020-04-16 |
Foxit PhantomPDF OCRAndExportToExcel Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-9945 |
Foxit |
CVE-2020-10912 |
7.8 |
2020-04-16 |
Foxit PhantomPDF SetFieldValue Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-9944 |
Foxit |
CVE-2020-10911 |
7.8 |
2020-04-16 |
Foxit PhantomPDF GetFieldValue Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-9943 |
Foxit |
CVE-2020-10910 |
7.8 |
2020-04-16 |
Foxit PhantomPDF RotatePage Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-9942 |
Foxit |
CVE-2020-10909 |
7.8 |
2020-04-16 |
Foxit PhantomPDF AddWatermark Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-9865 |
Foxit |
CVE-2020-10908 |
7.8 |
2020-04-16 |
Foxit PhantomPDF Export Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-9831 |
Foxit |
CVE-2020-10891 |
7.8 |
2020-04-16 |
Foxit PhantomPDF Save Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-9830 |
Foxit |
CVE-2020-10892 |
7.8 |
2020-04-16 |
Foxit PhantomPDF CombineFiles Arbitrary File Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9829 |
Foxit |
CVE-2020-10890 |
7.8 |
2020-04-16 |
Foxit PhantomPDF ConvertToPDF Arbitrary File Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9828 |
Foxit |
CVE-2020-10889 |
7.8 |
2020-04-16 |
Foxit PhantomPDF DuplicatePages Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-10742 |
Oracle |
CVE-2020-2907 |
7.5 |
2020-04-16 |
Oracle VirtualBox VBoxSVGA Type Confusion Privilege Escalation Vulnerability |
|||
ZDI-CAN-10719 |
Oracle |
CVE-2020-2907 |
7.5 |
2020-04-16 |
Oracle VirtualBox VBoxSVGA Type Confusion Privilege Escalation Vulnerability |
|||
ZDI-CAN-10416 |
Oracle |
CVE-2020-2929 |
7.8 |
2020-04-16 |
Oracle VirtualBox SLiRP Networking Out-Of-Bounds Access Remote Code Execution Vulnerability |
|||
ZDI-CAN-10423 |
Oracle |
CVE-2020-2758 |
8.2 |
2020-04-16 |
Oracle VirtualBox VBoxVGA VBoxVHWASurfaceBase Use-After-Free Privilege Escalation Vulnerability |
|||
ZDI-CAN-10422 |
Oracle |
CVE-2020-2748 |
3.2 |
2020-04-16 |
Oracle VirtualBox vmsvgaR3FifoUpdateCursor Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9334 |
Oracle |
CVE-2020-2950 |
9.8 |
2020-04-16 |
Oracle Business Intelligence AMF Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-10341 |
Oracle |
CVE-2020-2883 |
9.8 |
2020-04-16 |
Oracle WebLogic Server T3 Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-10466 |
Oracle |
CVE-2020-2956 |
8.1 |
2020-04-16 |
Oracle E-Business Suite Human Resources Organization Hierarchy Viewer PosServer SQL Injection Privilege Escalation Vulnerability |
|||
ZDI-CAN-10465 |
Oracle |
CVE-2020-2882 |
8.1 |
2020-04-16 |
Oracle E-Business Suite Human Resources Organization Hierarchy Viewer OrgServer SQL Injection Privilege Escalation Vulnerability |
|||
ZDI-CAN-10179 |
Oracle |
CVE-2020-2908 |
7.5 |
2020-04-16 |
2021-03-02 |
Oracle VirtualBox Virtual USB Numeric Truncation Privilege Escalation Vulnerability |
||
ZDI-CAN-10023 |
Oracle |
CVE-2020-2743 |
6.0 |
2020-04-16 |
2021-03-02 |
Oracle VirtualBox xHCI Out-Of-Bounds Read Information Disclosure Vulnerability |
||
ZDI-CAN-10022 |
Oracle |
CVE-2020-2742 |
8.2 |
2020-04-16 |
2021-03-02 |
Oracle VirtualBox xHCI Integer Overflow Privilege Escalation Vulnerability |
||
ZDI-CAN-9113 |
Oracle |
CVE-2020-2741 |
6.0 |
2020-04-16 |
Oracle VirtualBox shader_glsl_get_register_name Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9960 |
Oracle |
CVE-2020-2902 |
8.8 |
2020-04-16 |
Oracle VirtualBox D3D9 Shader Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9402 |
Intel |
CVE-2020-0557 |
8.8 |
2020-04-15 |
2021-06-29 |
Intel Wi-Fi Link Driver Netwtw06 Out-Of-Bounds Write Remote Code Execution Vulnerability |
||
ZDI-CAN-9376 |
Intel |
CVE-2020-0558 |
8.8 |
2020-04-15 |
2021-06-29 |
Intel Wi-Fi Link Driver Netwtw06 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||
ZDI-CAN-9277 |
Intel |
CVE-2020-0558 |
8.8 |
2020-04-15 |
Intel Wi-Fi Link Driver Netwtw04 Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10473 |
Eaton |
CVE-2020-10637 |
3.3 |
2020-04-15 |
Eaton HMiSoft VU3 File Parsing wTextLen Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10417 |
Eaton |
CVE-2020-10637 |
3.3 |
2020-04-15 |
Eaton HMiSoft VU3 File Parsing wDescribeLen Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10421 |
Eaton |
CVE-2020-10637 |
3.3 |
2020-04-15 |
Eaton HMiSoft VU3 File Parsing Giffile Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10411 |
Eaton |
CVE-2020-10637 |
3.3 |
2020-04-15 |
Eaton HMiSoft VU3 File Parsing Base64TextLen Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10340 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
Eaton HMiSoft VU3 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10167 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
Eaton HMiSoft VU3 File Parsing LinkSize Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10166 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
Eaton HMiSoft VU3 File Parsing LinkSize Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10165 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
Eaton HMiSoft VU3 File Parsing GifName Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10164 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
Eaton HMiSoft VU3 File Parsing wTitleTextLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10162 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
Eaton HMiSoft VU3 File Parsing wMailBlindCopyToLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10161 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
Eaton HMiSoft VU3 File Parsing wMessageLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10160 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
Eaton HMiSoft VU3 File Parsing wMailToLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10159 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
Eaton HMiSoft VU3 File Parsing wMailCopyToLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10158 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
Eaton HMiSoft VU3 File Parsing wMailContentLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10157 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
Eaton HMiSoft VU3 File Parsing wTextLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10153 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
Eaton HMiSoft VU3 File Parsing wTDateLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10152 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
Eaton HMiSoft VU3 File Parsing wTTimeLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10151 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
Eaton HMiSoft VU3 File Parsing wKPFStringLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10163 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
Eaton HMiSoft VU3 File Parsing wKPFStringLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10150 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
Eaton HMiSoft VU3 File Parsing wTitleLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10149 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
Eaton HMiSoft VU3 File Parsing wKPFString Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10148 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
Eaton HMiSoft VU3 File Parsing LinkSize Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10145 |
Eaton |
CVE-2020-10639 |
7.8 |
2020-04-15 |
Eaton HMiSoft VU3 File Parsing wTextLen Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10638 |
Microsoft |
CVE-2020-0906 |
7.8 |
2020-04-15 |
Microsoft Excel XLS File Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-10140 |
Microsoft |
CVE-2020-0906 |
3.3 |
2020-04-15 |
Microsoft Excel XLSM File Use-After-Free Information Disclosure Vulnerability |
|||
ZDI-CAN-10027 |
Microsoft |
CVE-2020-0932 |
8.8 |
2020-04-15 |
2020-10-27 |
Microsoft SharePoint TypeConverter Deserialization of Untrusted Data Remote Code Execution Vulnerability |
||
ZDI-CAN-10403 |
Microsoft |
CVE-2020-0821 |
3.3 |
2020-04-15 |
Microsoft Windows user32 Icon Extraction Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10054 |
Microsoft |
CVE-2020-0953 |
7.8 |
2020-04-15 |
Microsoft Windows JET Database Engine Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-10089 |
Microsoft |
CVE-2020-0931 |
8.8 |
2020-04-15 |
Microsoft SharePoint Scorecards Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-10062 |
Microsoft |
CVE-2020-0960 |
7.8 |
2020-04-15 |
Microsoft Windows JET Database Engine Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-10061 |
Microsoft |
CVE-2020-0959 |
7.8 |
2020-04-15 |
Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10058 |
Microsoft |
CVE-2020-0953 |
7.8 |
2020-04-15 |
Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10063 |
Microsoft |
CVE-2020-0992 |
7.8 |
2020-04-15 |
Microsoft Windows JET Database Engine Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-9968 |
Microsoft |
CVE-2020-0992 |
7.0 |
2020-04-15 |
Microsoft Windows JET Database Engine Integer Underflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9934 |
Microsoft |
CVE-2020-0956 |
8.8 |
2020-04-15 |
Microsoft Windows Palette Object Use-After-Free Privilege Escalation Vulnerability |
|||
ZDI-CAN-10057 |
Microsoft |
CVE-2020-0988 |
7.8 |
2020-04-15 |
Microsoft Windows JET Database Engine Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10059 |
Microsoft |
CVE-2020-0994 |
7.8 |
2020-04-15 |
Microsoft Windows JET Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9748 |
Microsoft |
CVE-2020-0821 |
3.3 |
2020-04-15 |
Microsoft Windows KERNELBASE Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10068 |
Adobe |
CVE-2020-3809 |
3.3 |
2020-04-15 |
Adobe After Effects TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10137 |
Fuji Electric |
7.8 |
2020-04-09 |
Fuji Electric V-Server Lite VPR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
||||
ZDI-CAN-10138 |
Fuji Electric |
7.8 |
2020-04-09 |
Fuji Electric V-Server Lite VPR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-10120 |
Fuji Electric |
CVE-2020-10646 |
7.8 |
2020-04-09 |
Fuji Electric V-Server Lite VPR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10119 |
Fuji Electric |
CVE-2020-10646 |
7.8 |
2020-04-09 |
Fuji Electric V-Server Lite VPR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10176 |
Advantech |
CVE-2020-12010 |
8.2 |
2020-04-08 |
(0Day) Advantech WebAccess IOCTL 0x2738 Arbitrary File Deletion Vulnerability |
|||
ZDI-CAN-10174 |
Advantech |
CVE-2020-12010 |
8.2 |
2020-04-08 |
(0Day) Advantech WebAccess IOCTL 0x2711 BwFLApp Arbitrary File Deletion Vulnerability |
|||
ZDI-CAN-10173 |
Advantech |
CVE-2020-12010 |
8.2 |
2020-04-08 |
(0Day) Advantech WebAccess IOCTL 0x2711 BwPSLink Arbitrary File Deletion Vulnerability |
|||
ZDI-CAN-10170 |
Advantech |
CVE-2020-12010 |
8.2 |
2020-04-08 |
(0Day) Advantech WebAccess IOCTL 0x2711 BwPFile Arbitrary File Deletion Vulnerability |
|||
ZDI-CAN-10175 |
Advantech |
CVE-2020-12010 |
8.2 |
2020-04-08 |
(0Day) Advantech WebAccess webvrpc IOCTL 0x2715 Arbitrary File Deletion Vulnerability |
|||
ZDI-CAN-9827 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS addLinkMonitor SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9826 |
Advantech |
CVE-2020-10603 |
8.8 |
2020-04-08 |
Advantech WebAccess/NMS DatabaseMgmtResource OS Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9825 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS getTrunkNumber SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9824 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9823 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9822 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9821 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9820 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9819 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9818 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9817 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9816 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9815 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9814 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9813 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9812 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9810 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9807 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9806 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9805 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9804 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9803 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9802 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9801 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9800 |
Advantech |
CVE-2020-10623 |
6.5 |
2020-04-08 |
Advantech WebAccess/NMS setDevicechoose SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9799 |
Advantech |
CVE-2020-10623 |
6.5 |
2020-04-08 |
Advantech WebAccess/NMS getFWUpgradeInfo SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9793 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9778 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9777 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9776 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9775 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9769 |
Advantech |
CVE-2020-10625 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS UsersInputAction Missing Authentication for Critical Function Authentication Bypass Vulnerability |
|||
ZDI-CAN-9764 |
Advantech |
CVE-2020-10623 |
6.5 |
2020-04-08 |
Advantech WebAccess/NMS getSyslogUiList SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9765 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DeviceData Performance SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9760 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS MibBrowser SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9759 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS MibBrowser SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9701 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS single-vlan-info SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9700 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9699 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9693 |
Advantech |
CVE-2020-10621 |
9.8 |
2020-04-08 |
Advantech WebAccess/NMS ProfileResource Unrestricted File Upload Remote Code Execution Vulnerability |
|||
ZDI-CAN-9692 |
Advantech |
CVE-2020-10621 |
9.8 |
2020-04-08 |
Advantech WebAccess/NMS DBBackupResource Unrestricted File Upload Remote Code Execution Vulnerability |
|||
ZDI-CAN-9629 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9628 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9627 |
Advantech |
CVE-2020-10621 |
9.8 |
2020-04-08 |
Advantech WebAccess/NMS ConfigRestoreAction Unrestricted File Upload Remote Code Execution Vulnerability |
|||
ZDI-CAN-9623 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9614 |
Advantech |
CVE-2020-10621 |
9.8 |
2020-04-08 |
Advantech WebAccess/NMS DBBackupRestoreAction Unrestricted File Upload Remote Code Execution Vulnerability |
|||
ZDI-CAN-9613 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9605 |
Advantech |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS AccesslogAction SQL Injection Information Disclosure Vulnerability |
||||
ZDI-CAN-9602 |
Advantech |
CVE-2020-10621 |
9.8 |
2020-04-08 |
Advantech WebAccess/NMS SupportDeviceaddAction Arbitrary File Upload Remote Code Execution Vulnerability |
|||
ZDI-CAN-9601 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9589 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9588 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9587 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS forcedScanDevice SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9585 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS FwStatusReportAction SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9584 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS FwStatusReportAction SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9583 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS TopogroupeditAction SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9582 |
Advantech |
CVE-2020-10621 |
9.8 |
2020-04-08 |
Advantech WebAccess/NMS FwUpgradeAction Unrestricted File Upload Remote Code Execution Vulnerability |
|||
ZDI-CAN-9581 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS TopogroupeditAction SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9580 |
Advantech |
CVE-2020-10621 |
9.8 |
2020-04-08 |
Advantech WebAccess/NMS extProgramAction Unrestricted File Upload Remote Code Execution Vulnerability |
|||
ZDI-CAN-9579 |
Advantech |
CVE-2020-10621 |
9.8 |
2020-04-08 |
Advantech WebAccess/NMS extProgramAction Unrestricted File Upload Remote Code Execution Vulnerability |
|||
ZDI-CAN-9578 |
Advantech |
CVE-2020-10621 |
9.8 |
2020-04-08 |
Advantech WebAccess/NMS LicenseImportAction Unrestricted File Upload Remote Code Execution Vulnerability |
|||
ZDI-CAN-9577 |
Advantech |
CVE-2020-10631 |
9.1 |
2020-04-08 |
Advantech WebAccess/NMS download.jsp Directory Traversal Information Disclosure and Denial-of-Service Vulnerability |
|||
ZDI-CAN-9576 |
Advantech |
CVE-2020-10621 |
9.8 |
2020-04-08 |
Advantech WebAccess/NMS FwUpgradeAction Unrestricted File Upload Remote Code Execution Vulnerability |
|||
ZDI-CAN-9575 |
Advantech |
CVE-2020-10629 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS MibbrowserTrapAddAction XML External Entity Reference Information Disclosure Vulnerability |
|||
ZDI-CAN-9574 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS reflashEventLog SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9573 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS Login SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9572 |
Advantech |
CVE-2020-10619 |
8.2 |
2020-04-08 |
Advantech WebAccess/NMS saveBackgroundAction Directory Traversal Denial-of-Service Vulnerability |
|||
ZDI-CAN-9571 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS saveBackground SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9570 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS EMSgroupAction SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9569 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS mibBrowserSetAction SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9568 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS searchDevice SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9567 |
Advantech |
CVE-2020-10617 |
7.5 |
2020-04-08 |
Advantech WebAccess/NMS Login isAccessDenied SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9566 |
Advantech |
CVE-2020-10621 |
9.8 |
2020-04-08 |
Advantech WebAccess/NMS saveBackground Unrestricted File Upload Remote Code Execution Vulnerability |
|||
ZDI-CAN-9598 |
Adobe |
CVE-2020-3766 |
7.8 |
2020-04-07 |
Adobe Acrobat Pro DC Genuine Software Service Incorrect Permission Assignment Privilege Escalation Vulnerability |
|||
ZDI-CAN-9757 |
Schneider Electric |
CVE-2020-7478 |
7.5 |
2020-04-03 |
Schneider Electric IGSS IGSSupdateservice Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-9758 |
Schneider Electric |
CVE-2020-7479 |
7.8 |
2020-04-03 |
Schneider Electric IGSS IGSSupdateservice Improper Access Control Privilege Escalation Vulnerability |
|||
ZDI-CAN-9345 |
VMware |
6.3 |
2020-04-03 |
VMware Workstation OVF NTLM Challenge Response Information Disclosure Vulnerability |
||||
ZDI-CAN-9770 |
Corel |
7.8 |
2020-04-02 |
(0Day) Corel PaintShop Pro PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-9772 |
Corel |
7.8 |
2020-04-02 |
(0Day) Corel PaintShop Pro TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-9771 |
Corel |
7.8 |
2020-04-02 |
2021-03-02 |
(0Day) Corel PaintShop Pro TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9698 |
Corel |
7.8 |
2020-04-02 |
(0Day) Corel PaintShop Pro PNG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-9697 |
Corel |
7.8 |
2020-04-02 |
(0Day) Corel PaintShop Pro TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-9696 |
Corel |
7.8 |
2020-04-02 |
(0Day) Corel PaintShop Pro TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-9695 |
Corel |
7.8 |
2020-04-02 |
(0Day) Corel PaintShop Pro GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-9694 |
Corel |
7.8 |
2020-04-02 |
(0Day) Corel PaintShop Pro PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-9639 |
Corel |
7.8 |
2020-04-02 |
(0Day) Corel PaintShop Pro TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-9638 |
Corel |
7.8 |
2020-04-02 |
(0Day) Corel PaintShop Pro TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
||||
ZDI-CAN-9637 |
Corel |
7.8 |
2020-04-02 |
(0Day) Corel PaintShop Pro PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-9636 |
Corel |
7.8 |
2020-04-02 |
(0Day) Corel PaintShop Pro PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-9635 |
Corel |
7.8 |
2020-04-02 |
(0Day) Corel PaintShop Pro PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-9634 |
Corel |
7.8 |
2020-04-02 |
(0Day) Corel PaintShop Pro PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-9633 |
Corel |
7.8 |
2020-04-02 |
(0Day) Corel PaintShop Pro J2K File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-9632 |
Corel |
7.8 |
2020-04-02 |
(0Day) Corel PaintShop Pro J2K File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-9631 |
Corel |
3.3 |
2020-04-02 |
(0Day) Corel PaintShop Pro PSD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-9630 |
Corel |
3.3 |
2020-04-02 |
(0Day) Corel PaintShop Pro J2K File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-10780 |
Linux |
CVE-2020-8835 |
8.8 |
2020-03-31 |
(Pwn2Own) Linux Kernel eBPF Improper Input Validation Privilege Escalation Vulnerability |
|||
ZDI-CAN-9950 |
IBM |
CVE-2020-4240 |
6.5 |
2020-03-31 |
IBM Spectrum Protect Plus plugin Directory Traversal File Creation Vulnerability |
|||
ZDI-CAN-9958 |
IBM |
CVE-2020-4241 |
8.8 |
2020-03-31 |
IBM Spectrum Protect Plus uploadHttpsCertificate Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9957 |
IBM |
CVE-2020-4242 |
8.8 |
2020-03-31 |
IBM Spectrum Protect Plus uploadLdapCertificate Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9953 |
IBM |
CVE-2020-4208 |
7.3 |
2020-03-31 |
IBM Spectrum Protect Plus serveradmin Authentication Bypass Vulnerability |
|||
ZDI-CAN-9952 |
IBM |
CVE-2020-4209 |
5.4 |
2020-03-31 |
IBM Spectrum Protect Plus uploadHttpsCertificate Directory Traversal File Creation Vulnerability |
|||
ZDI-CAN-9951 |
IBM |
CVE-2020-4209 |
5.4 |
2020-03-31 |
IBM Spectrum Protect Plus uploadLdapCertificate Directory Traversal File Creation Vulnerability |
|||
ZDI-CAN-9949 |
IBM |
CVE-2020-4214 |
8.2 |
2020-03-31 |
IBM Spectrum Protect Plus cleanupUpdateImage Arbitrary Directory Deletion Vulnerability |
|||
ZDI-CAN-9753 |
IBM |
CVE-2020-4206 |
8.8 |
2020-03-31 |
IBM Spectrum Protect Plus timezone Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9855 |
Apple |
CVE-2020-3897 |
6.3 |
2020-03-26 |
Apple Safari Object Transition Cache Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-9664 |
TP-Link |
CVE-2020-10888 |
5.9 |
2020-03-25 |
(Pwn2Own) TP-Link Archer A7 SSH Port Forwarding Authentication Bypass Vulnerability |
|||
ZDI-CAN-9662 |
TP-Link |
CVE-2020-10886 |
8.1 |
2020-03-25 |
(Pwn2Own) TP-Link Archer A7 tmpServer Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9663 |
TP-Link |
CVE-2020-10887 |
8.1 |
2020-03-25 |
(Pwn2Own) TP-Link Archer A7 Protection Mechanism Failure Firewall Bypass Vulnerability |
|||
ZDI-CAN-9661 |
TP-Link |
CVE-2020-10885 |
8.1 |
2020-03-25 |
(Pwn2Own) TP-Link Archer A7 DNS Response Improper Input Validation Remote Code Execution Vulnerability |
|||
ZDI-CAN-9652 |
TP-Link |
CVE-2020-10884 |
8.1 |
2020-03-25 |
(Pwn2Own) TP-Link Archer A7 tdpServer Use of Hard-coded Cryptographic Key Remote Code Execution Vulnerability |
|||
ZDI-CAN-9651 |
TP-Link |
CVE-2020-10883 |
5.3 |
2020-03-25 |
(Pwn2Own) TP-Link Archer A7 File System Incorrect Permission Assignment for Critical Resource Privilege Escalation Vulnerability |
|||
ZDI-CAN-9650 |
TP-Link |
CVE-2020-10882 |
8.8 |
2020-03-25 |
(Pwn2Own) TP-Link Archer A7 tdpServer Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9660 |
TP-Link |
CVE-2020-10881 |
9.8 |
2020-03-25 |
(Pwn2Own) TP-Link Archer A7 DNS Response Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9808 |
Adobe |
CVE-2020-3764 |
7.8 |
2020-03-24 |
Adobe Media Encoder CC MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10070 |
Adobe |
CVE-2020-3764 |
7.8 |
2020-03-24 |
Adobe Media Encoder 3GP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10126 |
Adobe |
CVE-2020-3802 |
7.8 |
2020-03-19 |
Adobe Acrobat Reader DC XFA Template Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-9984 |
Adobe |
CVE-2020-9552 |
7.8 |
2020-03-19 |
Adobe Bridge XD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9705 |
Adobe |
CVE-2020-9551 |
7.8 |
2020-03-19 |
Adobe Bridge CC GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9599 |
Adobe |
CVE-2020-3766 |
8.4 |
2020-03-19 |
Adobe Acrobat Pro DC Genuine Software Service Incorrect Permission Assignment Privilege Escalation Vulnerability |
|||
ZDI-CAN-9597 |
Adobe |
CVE-2020-3766 |
8.4 |
2020-03-19 |
Adobe Acrobat Pro DC Genuine Software Service Incorrect Permission Assignment Privilege Escalation Vulnerability |
|||
ZDI-CAN-9484 |
Adobe |
CVE-2020-3791 |
3.3 |
2020-03-19 |
Adobe Photoshop Type 1 Font Parsing Charstring Out-of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10034 |
Adobe |
CVE-2020-3790 |
7.8 |
2020-03-19 |
Adobe Photoshop DCM File Parsing Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-10050 |
Adobe |
CVE-2020-3782 |
3.3 |
2020-03-19 |
Adobe Photoshop TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10051 |
Adobe |
CVE-2020-3781 |
3.3 |
2020-03-19 |
Adobe Photoshop TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10053 |
Adobe |
CVE-2020-3780 |
7.8 |
2020-03-19 |
Adobe Photoshop EPS BoundingBox Element Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10065 |
Adobe |
CVE-2020-3779 |
7.8 |
2020-03-19 |
Adobe Photoshop GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10019 |
Adobe |
CVE-2020-3778 |
3.3 |
2020-03-19 |
Adobe Photoshop TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9989 |
Adobe |
CVE-2020-3773 |
7.8 |
2020-03-19 |
Adobe Photoshop U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10013 |
Adobe |
CVE-2020-3772 |
7.8 |
2020-03-19 |
Adobe Photoshop U3D File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9809 |
Adobe |
CVE-2020-3771 |
3.3 |
2020-03-19 |
Adobe Photoshop DCM Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9926 |
Adobe |
CVE-2020-3770 |
7.8 |
2020-03-19 |
Adobe Photoshop PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9645 |
Samsung |
8.8 |
2020-03-18 |
(Pwn2Own) Samsung Q60 Smart QLED TV JavaScript Integer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-10131 |
Microsoft |
7.8 |
2020-03-18 |
Microsoft Windows AppX Deployment Service Hard Link Privilege Escalation Vulnerability |
||||
ZDI-CAN-9931 |
Foxit |
CVE-2020-8870 |
7.8 |
2020-03-18 |
Foxit Studio Photo GetTIFPalette TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-9881 |
Foxit |
CVE-2020-8869 |
7.8 |
2020-03-18 |
Foxit Studio Photo TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10420 |
Delta Industrial Automation |
CVE-2020-6976 |
3.3 |
2020-03-17 |
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Giffile Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10413 |
Delta Industrial Automation |
CVE-2020-7002 |
7.8 |
2020-03-17 |
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10141 |
Delta Industrial Automation |
CVE-2020-7002 |
7.8 |
2020-03-17 |
Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing GifName Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-10073 |
Trend Micro |
CVE-2020-8600 |
8.6 |
2020-03-17 |
Trend Micro Worry-Free Business Security Directory Traversal Authentication Bypass Vulnerability |
|||
ZDI-CAN-9880 |
Foxit |
CVE-2020-8883 |
3.3 |
2020-03-16 |
Foxit Studio Photo EPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9811 |
Foxit |
CVE-2020-8882 |
7.8 |
2020-03-16 |
Foxit Studio Photo PSD File Parsing Uninitialized Pointer Remote Code Execution Vulnerability |
|||
ZDI-CAN-9774 |
Foxit |
CVE-2020-8881 |
7.8 |
2020-03-16 |
Foxit Studio Photo TIF File Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-9773 |
Foxit |
CVE-2020-8880 |
7.8 |
2020-03-16 |
Foxit Studio Photo TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-9626 |
Foxit |
CVE-2020-8879 |
3.3 |
2020-03-16 |
Foxit Studio Photo PSD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9625 |
Foxit |
CVE-2020-8878 |
7.8 |
2020-03-16 |
Foxit Studio Photo PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9624 |
Foxit |
CVE-2020-8877 |
3.3 |
2020-03-16 |
2020-03-17 |
Foxit Studio Photo PSD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||
ZDI-CAN-10099 |
VMware |
CVE-2020-3948 |
7.8 |
2020-03-13 |
2021-03-02 |
VMware Workstation Virtual Printer External Control of File Name Privilege Escalation Vulnerability |
||
ZDI-CAN-9292 |
VMware |
CVE-2020-3947 |
7.8 |
2020-03-13 |
VMware Workstation vmnetdhcp Use-After-Free Privilege Escalation Vulnerability |
|||
ZDI-CAN-10029 |
Parallels |
CVE-2020-8876 |
6.5 |
2020-03-13 |
Parallels Desktop OS X Host Kernel Module Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-10028 |
Parallels |
CVE-2020-8875 |
8.8 |
2020-03-13 |
Parallels Desktop OS X Host Kernel Module Out-Of-Bounds Write Privilege Escalation Vulnerability |
|||
ZDI-CAN-10032 |
Parallels |
CVE-2020-8874 |
7.5 |
2020-03-13 |
2021-03-02 |
Parallels Desktop xHCI Integer Overflow Privilege Escalation Vulnerability |
||
ZDI-CAN-10031 |
Parallels |
CVE-2020-8873 |
8.2 |
2020-03-13 |
2021-03-02 |
Parallels Desktop xHCI Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
||
ZDI-CAN-9428 |
Parallels |
CVE-2020-8872 |
6.0 |
2020-03-13 |
2021-03-02 |
Parallels Desktop xHCI Out-Of-Bounds Read Information Disclosure Vulnerability |
||
ZDI-CAN-9403 |
Parallels |
CVE-2020-8871 |
8.2 |
2020-03-13 |
2021-03-02 |
Parallels Desktop VGA Out-Of-Bounds Write Privilege Escalation Vulnerability |
||
ZDI-CAN-9460 |
SAP |
CVE-2020-6208 |
8.2 |
2020-03-12 |
SAP Crystal Reports RPT File Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-9553 |
Quest |
CVE-2020-8868 |
9.8 |
2020-03-12 |
Quest Foglight Evolve CommandLineService Use of Hard-coded Credentials Remote Code Execution Vulnerability |
|||
ZDI-CAN-9665 |
Xiaomi |
CVE-2020-9530 |
8.8 |
2020-03-12 |
(Pwn2Own) Xiaomi Mi9 Browser manualUpgradeInfo Improper Control of Generation of Code Remote Code Execution Vulnerability |
|||
ZDI-CAN-9657 |
Xiaomi |
CVE-2020-9531 |
5.3 |
2020-03-12 |
(Pwn2Own) Xiaomi GetApps Intent Privilege Escalation Vulnerability |
|||
ZDI-CAN-9656 |
Xiaomi |
CVE-2020-9531 |
5.5 |
2020-03-12 |
(Pwn2Own) Xiaomi Mi9 Browser Untrusted Site Redirection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9646 |
Xiaomi |
8.8 |
2020-03-12 |
(Pwn2Own) Xiaomi Mi9 Browser ParseFormalParameterList Improper Input Validation Remote Code Execution Vulnerability |
||||
ZDI-CAN-10525 |
Microsoft |
CVE-2020-0807 |
8.8 |
2020-03-12 |
Microsoft Windows Media Player AVI Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9959 |
Microsoft |
CVE-2020-0851 |
7.8 |
2020-03-12 |
Microsoft Word HTML Rendering Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-9875 |
Microsoft |
CVE-2020-0887 |
8.8 |
2020-03-12 |
Microsoft Windows Printer Device Context Use-After-Free Privilege Escalation Vulnerability |
|||
ZDI-CAN-9691 |
Microsoft |
CVE-2020-0841 |
6.1 |
2020-03-12 |
Microsoft Windows DiagTrack Service Hard Link Denial-of-Service Vulnerability |
|||
ZDI-CAN-9502 |
Microsoft |
CVE-2020-0840 |
7.8 |
2020-03-12 |
Microsoft Windows AppX Deployment Service Hard Link Escalation of Privilege Vulnerability |
|||
ZDI-CAN-9858 |
Microsoft |
CVE-2020-0788 |
8.8 |
2020-03-12 |
Microsoft Windows CreateXlateObject Out-Of-Bounds Write Privilege Escalation Vulnerability |
|||
ZDI-CAN-9857 |
Microsoft |
CVE-2020-0788 |
8.8 |
2020-03-12 |
Microsoft Windows CreateXlateObject Out-Of-Bounds Write Privilege Escalation Vulnerability |
|||
ZDI-CAN-9856 |
Microsoft |
CVE-2020-0788 |
8.8 |
2020-03-12 |
Microsoft Windows ulGetNearestIndexFromColorref Out-Of-Bounds Write Privilege Escalation Vulnerability |
|||
ZDI-CAN-9473 |
Microsoft |
CVE-2020-0776 |
6.1 |
2020-03-12 |
Microsoft Windows AppX Deployment Service Link Resolution Denial-of-Service Vulnerability |
|||
ZDI-CAN-10469 |
Horde |
CVE-2020-8865 |
6.3 |
2020-03-10 |
Horde Groupware Webmail Edition edit Page Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-10125 |
Horde |
CVE-2020-8866 |
4.3 |
2020-03-10 |
Horde Groupware Webmail Edition add Page Unrestricted File Upload Arbitrary File Creation Vulnerability |
|||
ZDI-CAN-9956 |
IBM |
CVE-2020-4210 |
9.8 |
2020-03-05 |
IBM Spectrum Protect Plus changeAdministratorPassword Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9955 |
IBM |
CVE-2020-4211 |
9.8 |
2020-03-05 |
IBM Spectrum Protect Plus hostname Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9954 |
IBM |
CVE-2020-4212 |
9.8 |
2020-03-05 |
IBM Spectrum Protect Plus hfpackage Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9752 |
IBM |
CVE-2020-4222 |
9.8 |
2020-03-05 |
IBM Spectrum Protect Plus password Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9750 |
IBM |
CVE-2020-4213 |
9.8 |
2020-03-05 |
IBM Spectrum Protect Plus username Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9491 |
Cisco |
CVE-2020-3127 |
7.8 |
2020-03-05 |
Cisco WebEx Network Recording Player ARF File Uninitialized Pointer Remote Code Execution Vulnerability |
|||
ZDI-CAN-9471 |
D-Link |
CVE-2020-8864 |
8.8 |
2020-02-24 |
D-Link Multiple Routers HNAP strncmp Incorrect Comparison Authentication Bypass Vulnerability |
|||
ZDI-CAN-9470 |
D-Link |
CVE-2020-8863 |
8.8 |
2020-02-24 |
D-Link Multiple Routers HNAP PrivateLogin Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability |
|||
ZDI-CAN-10082 |
D-Link |
CVE-2020-8862 |
8.8 |
2020-02-21 |
D-Link DAP-2610 Router login Incorrect Comparison Authentication Bypass Vulnerability |
|||
ZDI-CAN-9554 |
D-Link |
CVE-2020-8861 |
8.8 |
2020-02-21 |
D-Link DAP-1330 HNAP Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability |
|||
ZDI-CAN-9304 |
WECON |
7.8 |
2020-02-20 |
(0Day) WECON LeviStudioU MulStatus szFilename Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-9290 |
WECON |
7.8 |
2020-02-20 |
(0Day) WECON LeviStudioU G_bmp szFilename Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-9280 |
WECON |
7.8 |
2020-02-20 |
(0Day) WECON LeviStudioU G_bmp szFilename Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-9309 |
Rockwell Automation |
CVE-2020-6967 |
9.8 |
2020-02-20 |
(0Day) Rockwell Automation FactoryTalk RNADiagnosticsSrv Deserialization Of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-8315 |
AMD |
6.2 |
2020-02-20 |
(0Day) AMD Radeon Divide By Zero Denial of Service Vulnerability |
||||
ZDI-CAN-10076 |
Microsoft |
CVE-2020-0792 |
8.8 |
2020-02-20 |
Microsoft Windows NtUserResolveDesktopForWOW Heap-based Buffer Overflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-9615 |
Microsoft |
CVE-2020-0688 |
8.8 |
2020-02-20 |
Microsoft Exchange Server Exchange Control Panel Fixed Cryptographic Key Remote Code Execution Vulnerability |
|||
ZDI-CAN-9538 |
Microsoft |
CVE-2020-0668 |
7.8 |
2020-02-20 |
2020-03-09 |
Microsoft Windows Service Tracing Arbitrary File Move Privilege Escalation Vulnerability |
||
ZDI-CAN-9666 |
Samsung |
8.4 |
2020-02-20 |
2020-02-21 |
(Pwn2Own) Samsung Galaxy S10 IndexedDB Use-After-Free Sandbox Escape Vulnerability |
|||
ZDI-CAN-9658 |
Samsung |
CVE-2020-8860 |
7.1 |
2020-02-20 |
2020-02-21 |
(Pwn2Own) Samsung Galaxy S10 Call Control Setup Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||
ZDI-CAN-9655 |
Samsung |
8.4 |
2020-02-20 |
2020-02-21 |
(Pwn2Own) Samsung Galaxy S10 FileWriter Use-After-Free Sandbox Escape Vulnerability |
|||
ZDI-CAN-9654 |
Samsung |
6.3 |
2020-02-20 |
2020-02-21 |
(Pwn2Own) Samsung Galaxy S10 Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-10115 |
ELOG |
CVE-2020-8859 |
5.3 |
2020-02-12 |
ELOG Electronic Logbook drop-count Null Pointer Dereference Denial-of-Service Vulnerability |
|||
ZDI-CAN-9454 |
Adobe |
CVE-2020-3740 |
7.8 |
2020-02-12 |
Adobe FrameMaker TIF File Parsing Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-9453 |
Adobe |
CVE-2020-3739 |
7.8 |
2020-02-12 |
Adobe FrameMaker IFF File Parsing Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-9617 |
Adobe |
CVE-2020-3748 |
7.8 |
2020-02-12 |
Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-9432 |
Adobe |
CVE-2020-3738 |
7.8 |
2020-02-12 |
Adobe FrameMaker TIF File Parsing Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-9436 |
Adobe |
CVE-2020-3737 |
7.8 |
2020-02-12 |
Adobe FrameMaker TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9445 |
Adobe |
CVE-2020-3736 |
7.8 |
2020-02-12 |
Adobe FrameMaker GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9446 |
Adobe |
CVE-2020-3735 |
7.8 |
2020-02-12 |
Adobe FrameMaker PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9447 |
Adobe |
CVE-2020-3734 |
7.8 |
2020-02-12 |
Adobe FrameMaker TGA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9442 |
Adobe |
CVE-2020-3733 |
7.8 |
2020-02-12 |
Adobe FrameMaker BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9444 |
Adobe |
CVE-2020-3732 |
7.8 |
2020-02-12 |
Adobe FrameMaker IFF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9443 |
Adobe |
CVE-2020-3731 |
7.8 |
2020-02-12 |
Adobe FrameMaker CEL File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9439 |
Adobe |
CVE-2020-3730 |
7.8 |
2020-02-12 |
Adobe FrameMaker RGB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9430 |
Adobe |
CVE-2020-3729 |
7.8 |
2020-02-12 |
Adobe FrameMaker PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9435 |
Adobe |
CVE-2020-3728 |
7.8 |
2020-02-12 |
Adobe FrameMaker PIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9437 |
Adobe |
CVE-2020-3727 |
7.8 |
2020-02-12 |
Adobe FrameMaker PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9438 |
Adobe |
CVE-2020-3726 |
7.8 |
2020-02-12 |
Adobe FrameMaker BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9440 |
Adobe |
CVE-2020-3725 |
7.8 |
2020-02-12 |
Adobe FrameMaker RGB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9441 |
Adobe |
CVE-2020-3724 |
7.8 |
2020-02-12 |
Adobe FrameMaker RGB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9429 |
Adobe |
CVE-2020-3723 |
7.8 |
2020-02-12 |
Adobe FrameMaker TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9431 |
Adobe |
CVE-2020-3722 |
7.8 |
2020-02-12 |
Adobe FrameMaker BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9433 |
Adobe |
CVE-2020-3721 |
7.8 |
2020-02-12 |
Adobe FrameMaker TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9434 |
Adobe |
CVE-2020-3720 |
7.8 |
2020-02-12 |
Adobe FrameMaker PIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9418 |
Symantec |
CVE-2020-5826 |
5.5 |
2020-02-11 |
Symantec Endpoint Protection AvHostPlugin Out-of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9397 |
Symantec |
CVE-2020-5825 |
7.1 |
2020-02-11 |
Symantec Endpoint Protection AvHostPlugin Missing Authentication Arbitrary File Move Vulnerability |
|||
ZDI-CAN-9404 |
Symantec |
CVE-2020-5825 |
5.5 |
2020-02-11 |
Symantec Endpoint Protection AvHostPlugin Missing Authentication Denial-of-Service Vulnerability |
|||
ZDI-CAN-9396 |
Symantec |
CVE-2020-5825 |
6.1 |
2020-02-11 |
Symantec Endpoint Protection AvHostPlugin Missing Authentication Arbitrary File Rename Vulnerability |
|||
ZDI-CAN-9537 |
Symantec |
CVE-2020-5831 |
3.3 |
2020-02-11 |
Symantec Endpoint Protection Manager secars Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9536 |
Symantec |
CVE-2020-5830 |
3.3 |
2020-02-11 |
Symantec Endpoint Protection Manager secars Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9535 |
Symantec |
CVE-2020-5829 |
3.3 |
2020-02-11 |
Symantec Endpoint Protection Manager secars Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9534 |
Symantec |
CVE-2020-5828 |
3.3 |
2020-02-11 |
Symantec Endpoint Protection Manager secars Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9395 |
Symantec |
CVE-2020-5824 |
5.5 |
2020-02-11 |
Symantec Endpoint Protection AvHostPlugin Missing Authentication Denial-of-Service Vulnerability |
|||
ZDI-CAN-9459 |
Symantec |
CVE-2020-5827 |
3.3 |
2020-02-11 |
Symantec Endpoint Protection Manager secars Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9450 |
Symantec |
CVE-2020-5823 |
7.8 |
2020-02-11 |
Symantec Endpoint Protection ccJobMgr Missing Authentication Privilege Escalation Vulnerability |
|||
ZDI-CAN-9426 |
Symantec |
CVE-2020-5822 |
7.8 |
2020-02-11 |
Symantec Endpoint Protection ccSvc Missing Authentication Privilege Escalation Vulnerability |
|||
ZDI-CAN-9420 |
Symantec |
CVE-2020-5820 |
7.8 |
2020-02-11 |
Symantec Endpoint Protection AvHostPlugin Out-Of-Bounds Write Privilege Escalation Vulnerability |
|||
ZDI-CAN-9383 |
Apple |
CVE-2020-3877 |
7.5 |
2020-02-11 |
Apple Messages HandwritingProvider Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9595 |
Apple |
CVE-2020-3839 |
7.1 |
2020-02-11 |
Apple macOS IO80211Family Stack-based Buffer Overflow Information Disclosure Vulnerability |
|||
ZDI-CAN-9552 |
Moxa |
CVE-2020-8858 |
8.8 |
2020-02-11 |
2020-04-01 |
Moxa MGate 5105-MB-EIP DestIP Command Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-9862 |
Foxit |
CVE-2020-8857 |
7.8 |
2020-02-11 |
Foxit Reader Annotations AcroForm Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-9640 |
Foxit |
CVE-2020-8856 |
7.8 |
2020-02-11 |
Foxit PhantomPDF AcroForm addWatermarkFromText Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-9560 |
Foxit |
CVE-2020-8855 |
7.8 |
2020-02-11 |
Foxit PhantomPDF fxhtml2pdf Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-9606 |
Foxit |
CVE-2020-8854 |
7.8 |
2020-02-11 |
Foxit PhantomPDF JPEG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9591 |
Foxit |
CVE-2020-8853 |
7.8 |
2020-02-11 |
Foxit PhantomPDF HTML2PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9416 |
Foxit |
CVE-2020-8852 |
3.3 |
2020-02-11 |
Foxit Reader JPEG2000 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9406 |
Foxit |
CVE-2020-8851 |
7.8 |
2020-02-11 |
2020-11-17 |
Foxit Reader JPEG2000 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||
ZDI-CAN-9415 |
Foxit |
CVE-2020-8850 |
7.8 |
2020-02-11 |
2020-04-01 |
Foxit Reader JPEG2000 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||
ZDI-CAN-9413 |
Foxit |
CVE-2020-8849 |
7.8 |
2020-02-11 |
2020-04-01 |
Foxit Reader JPEG2000 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||
ZDI-CAN-9407 |
Foxit |
CVE-2020-8848 |
7.8 |
2020-02-11 |
2020-11-17 |
Foxit Reader JPEG2000 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||
ZDI-CAN-9414 |
Foxit |
CVE-2020-8847 |
7.8 |
2020-02-11 |
2020-04-01 |
Foxit Reader JPEG2000 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||
ZDI-CAN-9400 |
Foxit |
CVE-2020-8846 |
7.8 |
2020-02-11 |
2020-02-18 |
Foxit PhantomPDF text Field Object Use-After-Free Remote Code Execution Vulnerability |
||
ZDI-CAN-9358 |
Foxit |
CVE-2020-8845 |
7.8 |
2020-02-11 |
Foxit PhantomPDF AcroForm addWatermarkFromText Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-9102 |
Foxit |
CVE-2020-8844 |
7.8 |
2020-02-11 |
Foxit Reader ConvertToPDF JPEG Parsing Integer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9549 |
Google |
CVE-2019-14088 |
7.8 |
2020-02-07 |
Google Android V4l2 cam_actuator_driver_cmd Use-After-Free Privilege Escalation Vulnerability |
|||
ZDI-CAN-8956 |
Bitdefender |
CVE-2020-8095 |
6.1 |
2020-02-05 |
Bitdefender Total Security Link Resolution Denial-of-Service Vulnerability |
|||
ZDI-CAN-9015 |
Hewlett Packard Enterprise |
CVE-2020-7176 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center viewTaskResultDetailFact Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-9013 |
Hewlett Packard Enterprise |
CVE-2020-7188 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center userSelectPagingContent Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-9014 |
Hewlett Packard Enterprise |
CVE-2020-7185 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center tvxlanLegend Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-9012 |
Hewlett Packard Enterprise |
CVE-2020-7177 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center wmiConfigContent Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-9011 |
Hewlett Packard Enterprise |
CVE-2020-7183 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center forwardredirect Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-9010 |
Hewlett Packard Enterprise |
CVE-2020-7184 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center viewBatchTaskResultDetailFact Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-9009 |
Hewlett Packard Enterprise |
CVE-2020-7186 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center powershellConfigContent Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-9008 |
Hewlett Packard Enterprise |
CVE-2020-7181 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center smsRulesDownload Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-9007 |
Hewlett Packard Enterprise |
CVE-2020-7179 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center thirdPartyPerfSelectTask Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8997 |
Hewlett Packard Enterprise |
CVE-2020-7187 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center reportpage index Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-9006 |
Hewlett Packard Enterprise |
CVE-2020-7182 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center sshConfig Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-9005 |
Hewlett Packard Enterprise |
CVE-2020-7194 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center perfAddorModDeviceMonitor Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8998 |
Hewlett Packard Enterprise |
CVE-2020-7163 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center navigationTo Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8990 |
Hewlett Packard Enterprise |
CVE-2020-7170 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center select Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8979 |
Hewlett Packard Enterprise |
CVE-2020-7165 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center iccSelectCommand Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8978 |
Hewlett Packard Enterprise |
CVE-2020-7160 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center iccSelectDeviceSeries Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8977 |
Hewlett Packard Enterprise |
CVE-2020-7175 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center iccSelectDymicParam Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8996 |
Hewlett Packard Enterprise |
CVE-2020-7158 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center perfSelectTask Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-9004 |
Hewlett Packard Enterprise |
CVE-2020-7168 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center selectUserGroup Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8958 |
Hewlett Packard Enterprise |
CVE-2020-7173 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center actionSelectContent Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-9003 |
Hewlett Packard Enterprise |
CVE-2020-7164 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center operationSelect Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-9002 |
Hewlett Packard Enterprise |
CVE-2020-7161 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center reportTaskSelect Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-9001 |
Hewlett Packard Enterprise |
CVE-2020-7174 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center soapConfigContent Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-9000 |
Hewlett Packard Enterprise |
CVE-2020-7172 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center templateSelect Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8999 |
Hewlett Packard Enterprise |
CVE-2020-7167 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center quickTemplateSelect Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8995 |
Hewlett Packard Enterprise |
CVE-2020-7171 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center guiDataDetail Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8994 |
Hewlett Packard Enterprise |
CVE-2020-7169 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center ictExpertCSVDownload Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8993 |
Hewlett Packard Enterprise |
CVE-2020-7166 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center operatorGroupTreeSelectContent Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8992 |
Hewlett Packard Enterprise |
CVE-2020-7162 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center operatorGroupSelectContent Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8991 |
Hewlett Packard Enterprise |
CVE-2020-7157 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center selViewNavContent Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8984 |
Hewlett Packard Enterprise |
CVE-2020-7178 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center mediaForAction Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8983 |
Hewlett Packard Enterprise |
CVE-2020-7180 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center ictExpertDownload Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8980 |
Hewlett Packard Enterprise |
CVE-2020-7153 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center iccSelectDevType Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8985 |
Hewlett Packard Enterprise |
CVE-2020-7152 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center faultParasSet Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8986 |
Hewlett Packard Enterprise |
CVE-2020-7156 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center faultInfo_content Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8989 |
Hewlett Packard Enterprise |
CVE-2020-7155 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center select Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8988 |
Hewlett Packard Enterprise |
CVE-2020-7151 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center faultTrapGroupSelect Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8987 |
Hewlett Packard Enterprise |
CVE-2020-7150 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center faultStatChooseFaultType Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8982 |
Hewlett Packard Enterprise |
CVE-2020-7154 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center ifViewSelectPage Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8981 |
Hewlett Packard Enterprise |
CVE-2020-7149 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center ictExpertCSVDownload Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8976 |
Hewlett Packard Enterprise |
CVE-2020-7193 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center ictExpertCSVDownload Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8975 |
Hewlett Packard Enterprise |
CVE-2020-7195 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center iccSelectRules Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8974 |
Hewlett Packard Enterprise |
CVE-2020-7189 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center faultFlashEventSelectFact Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8973 |
Hewlett Packard Enterprise |
CVE-2020-7190 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center deviceSelect Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8972 |
Hewlett Packard Enterprise |
CVE-2020-7191 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center devSoftSel Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8969 |
Hewlett Packard Enterprise |
CVE-2020-7192 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center deviceThresholdConfig Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8966 |
Hewlett Packard Enterprise |
CVE-2020-7144 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center compareFilesResult Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8962 |
Hewlett Packard Enterprise |
CVE-2020-7148 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center deploySelectSoftware Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8961 |
Hewlett Packard Enterprise |
CVE-2020-7147 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center deploySelectBootrom Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8960 |
Hewlett Packard Enterprise |
CVE-2020-7146 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center devGroupSelect Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8959 |
Hewlett Packard Enterprise |
CVE-2020-7159 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center customTemplateSelect Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-8957 |
Hewlett Packard Enterprise |
CVE-2020-7145 |
8.8 |
2020-02-04 |
2021-03-02 |
(0Day) Hewlett Packard Enterprise Intelligent Management Center choosePerfView Expression Language Injection Remote Code Execution Vulnerability |
||
ZDI-CAN-9401 |
Adobe |
CVE-2019-16451 |
7.8 |
2020-02-03 |
Adobe Acrobat Pro DC TTF Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-9399 |
Apple |
CVE-2019-8835 |
4.3 |
2020-01-27 |
Apple Safari SimpleLineLayout Use-After-Free Information Disclosure Vulnerability |
|||
ZDI-CAN-9969 |
Microsoft |
CVE-2020-0635 |
7.8 |
2020-01-17 |
Microsoft Windows WIA Junction Privilege Escalation Vulnerability |
|||
ZDI-CAN-9797 |
Oracle |
CVE-2020-2727 |
6.0 |
2020-01-15 |
Oracle VirtualBox e1000 Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9796 |
Oracle |
CVE-2020-2726 |
7.5 |
2020-01-15 |
Oracle VirtualBox SCSI Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
|||
ZDI-CAN-9141 |
Oracle |
CVE-2020-2705 |
6.5 |
2020-01-15 |
Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9112 |
Oracle |
CVE-2020-2704 |
6.5 |
2020-01-15 |
Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9794 |
Oracle |
CVE-2020-2702 |
7.5 |
2020-01-15 |
Oracle VirtualBox xHCI Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
|||
ZDI-CAN-9763 |
Oracle |
CVE-2020-2701 |
7.5 |
2020-01-15 |
Oracle VirtualBox xHCI Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
|||
ZDI-CAN-9590 |
Oracle |
CVE-2020-2698 |
7.5 |
2020-01-15 |
Oracle VirtualBox xHCI Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability |
|||
ZDI-CAN-9457 |
Oracle |
CVE-2020-2693 |
5.3 |
2020-01-15 |
Oracle VirtualBox e1000 Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9117 |
Oracle |
CVE-2020-2692 |
6.5 |
2020-01-15 |
Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9116 |
Oracle |
CVE-2020-2691 |
6.5 |
2020-01-15 |
Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9115 |
Oracle |
CVE-2020-2690 |
6.5 |
2020-01-15 |
Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9114 |
Oracle |
CVE-2020-2689 |
6.5 |
2020-01-15 |
Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9389 |
Oracle |
CVE-2020-2682 |
8.2 |
2020-01-15 |
Oracle VirtualBox VBoxVHWAHandleTable Out-Of-Bounds Access Privilege Escalation Vulnerability |
|||
ZDI-CAN-9109 |
Oracle |
CVE-2020-2681 |
6.5 |
2020-01-15 |
Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9020 |
Oracle |
CVE-2020-2555 |
9.8 |
2020-01-15 |
Oracle WebLogic Server T3 Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-9427 |
Microsoft |
CVE-2020-0652 |
7.8 |
2020-01-15 |
Microsoft Office Graph Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-9641 |
Sony |
CVE-2017-5030 |
6.3 |
2020-01-15 |
2020-02-21 |
(Pwn2Own) Sony X800G Smart TV Vewd Out-Of-Bounds Read Remote Code Execution Vulnerability |
||
ZDI-CAN-9382 |
Microsoft |
CVE-2020-0634 |
8.8 |
2020-01-15 |
Microsoft Windows CLFS Use-After-Free Privilege Escalation Vulnerability |
|||
ZDI-CAN-9377 |
Microsoft |
CVE-2020-0616 |
7.3 |
2020-01-15 |
Microsoft Windows Device Management Enrollment Service Hard Link Denial-of-Service Vulnerability |
|||
ZDI-CAN-9423 |
Microsoft |
CVE-2020-0615 |
8.4 |
2020-01-15 |
Microsoft Windows CLFS Driver Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-9421 |
Microsoft |
CVE-2020-0639 |
8.4 |
2020-01-15 |
Microsoft Windows CLFS Driver Integer Overflow Information Disclosure Vulnerability |
|||
ZDI-CAN-9341 |
Cisco |
CVE-2019-15984 |
6.5 |
2020-01-03 |
Cisco Data Center Network Manager getLanSwitchDataLength SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9248 |
Cisco |
CVE-2019-15983 |
7.5 |
2020-01-03 |
Cisco Data Center Network Manager getTopologyVlanList XML External Entity Processing Information Disclosure Vulnerability |
|||
ZDI-CAN-9285 |
Cisco |
CVE-2019-15983 |
6.5 |
2020-01-03 |
Cisco Data Center Network Manager CablePlans XML External Entity Processing Information Disclosure Vulnerability |
|||
ZDI-CAN-9469 |
Cisco |
CVE-2019-15980 |
6.5 |
2020-01-03 |
Cisco Data Center Network Manager getDeployContent Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-9425 |
Cisco |
CVE-2019-15983 |
7.5 |
2020-01-03 |
Cisco Data Center Network Manager addGroupNavigation XML External Entity Processing Information Disclosure Vulnerability |
|||
ZDI-CAN-9353 |
Cisco |
CVE-2019-15984 |
7.2 |
2020-01-03 |
Cisco Data Center Network Manager checkLinkUUID SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9340 |
Cisco |
CVE-2019-15984 |
7.5 |
2020-01-03 |
Cisco Data Center Network Manager getSwitchsDataLength SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9247 |
Cisco |
CVE-2019-15983 |
7.5 |
2020-01-03 |
Cisco Data Center Network Manager getInventoryIslList XML External Entity Processing Information Disclosure Vulnerability |
|||
ZDI-CAN-9361 |
Cisco |
CVE-2019-15984 |
7.2 |
2020-01-03 |
Cisco Data Center Network Manager getSwitchName SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9360 |
Cisco |
CVE-2019-15984 |
4.9 |
2020-01-03 |
Cisco Data Center Network Manager getRpmJobLength SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9356 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getConfigTemplateFileName SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9352 |
Cisco |
CVE-2019-15984 |
7.2 |
2020-01-03 |
Cisco Data Center Network Manager getSwitchDbIdBySerialNumber SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9351 |
Cisco |
CVE-2019-15984 |
4.9 |
2020-01-03 |
Cisco Data Center Network Manager getGirTaskLength SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9350 |
Cisco |
CVE-2019-15984 |
4.9 |
2020-01-03 |
Cisco Data Center Network Manager getVpcCount SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9349 |
Cisco |
CVE-2019-15984 |
4.9 |
2020-01-03 |
Cisco Data Center Network Manager getJobLength SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9348 |
Cisco |
CVE-2019-15984 |
4.9 |
2020-01-03 |
Cisco Data Center Network Manager getZoneDataLength SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9347 |
Cisco |
CVE-2019-15984 |
4.9 |
2020-01-03 |
Cisco Data Center Network Manager getVsanDataLength SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9342 |
Cisco |
CVE-2019-15984 |
7.5 |
2020-01-03 |
Cisco Data Center Network Manager getSanSwitchDataLength SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9305 |
Cisco |
CVE-2019-15982 |
7.2 |
2020-01-03 |
Cisco Data Center Network Manager AFW Image Upload Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-9286 |
Cisco |
CVE-2019-15978 |
7.2 |
2020-01-03 |
Cisco Data Center Network Manager createLanFabric Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9288 |
Cisco |
CVE-2019-15980 |
7.2 |
2020-01-03 |
Cisco Data Center Network Manager writeToFile Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-9235 |
Cisco |
CVE-2019-15979 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager importTS Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9301 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getDiscoveredDeviceCount groupId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9300 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getDiscoveredDeviceCount hostname SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9289 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getDiscoveredDeviceCount switchIdList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9283 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager setVxlanProperties SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9267 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager createSite SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9266 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager createSite getIp SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9234 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager checkDiscoveryEthSwCandidates4List SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9218 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getN3KBufferStatList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9217 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getEndDeviceStatListWithVsan SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9216 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getNpvLinkStatJoinList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9215 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getFlowStatList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9214 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getTaskList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9210 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager modifyGroupName SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9209 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9208 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9207 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getVpcCount SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9203 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getLanSwitchBandwidthStatList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9202 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getSanSwitchBandwidthStatList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9201 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getAllVpcs SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9200 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getLanEthernetStatListES SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9199 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getSanIslStatList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9198 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getPortGroupStatList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9197 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getLanIslStatList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9196 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getNpvLinkStatList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9195 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getLanIslStatJoinList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9194 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getLanGigEStatList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9193 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getSanGigEStatList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9192 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getSanIslStatJoinList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9189 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getLanSwitchListWithoutUsedPorts SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9188 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getLanStatEntities SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9187 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getSanStatEntities SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9186 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getOidSanStatList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9185 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getOidLanStatList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9180 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getPortGroupMember SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9170 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getHostEnclList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9169 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getSanZoneList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9168 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getVsanList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9167 |
Cisco |
CVE-2019-15985 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getEndPortConnectionsForStorageSystem SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9166 |
Cisco |
CVE-2019-15985 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getEndPortConnectionsForStorageEnclosure SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9165 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getVmHostData SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9127 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getDeployerTaskDetails SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9124 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getJobList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9164 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getVsanListForEnclosures SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9163 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getAllGroups SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9134 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getZoneListByZoneNameAndParentId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9129 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getSanIslListWithPM SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9128 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getEndDeviceList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9060 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getSwitches SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9068 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getSwitches SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9058 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getModulesBySwitch SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9224 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getLanIslStatListES SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9057 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getModules SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9059 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getNpvLinks SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9125 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getBackupStatusCount SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9225 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getSanIslStatListESBySQL SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9223 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getFlowStatListES SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9220 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getSanGigEStatListES SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9219 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getCustomPGStatList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9222 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getEndDeviceStatListESBySQL SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9221 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getIslListWithPMForTopology SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9181 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getHostEnclList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9182 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getLanSwitchList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9184 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getLanIslList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9074 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getisls SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9073 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getInterfacesBySwitch SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9072 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getHostEnclList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9067 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getHostEnclList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9065 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getEndPorts SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9061 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getLicenses SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9064 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getAllTemplate SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9063 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getRPMTasks SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9040 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getJobExecutionDetails SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9062 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager DeviceModuleRest getDeviceModulesupport SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9070 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getSyslogEventList SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9053 |
Cisco |
CVE-2019-15984 |
6.5 |
2020-01-03 |
Cisco Data Center Network Manager VirtualPortChannel getDomain SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-9069 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getHostEnclDataLength SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9052 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getVpcPeerHistory SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9051 |
Cisco |
CVE-2019-15984 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager getVpcHistory SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9050 |
Cisco |
CVE-2019-15984 |
7.2 |
2020-01-03 |
Cisco Data Center Network Manager getAllVpc SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9043 |
Cisco |
CVE-2019-15984 |
7.2 |
2020-01-03 |
Cisco Data Center Network Manager deleteVpcHistory SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9042 |
Cisco |
CVE-2019-15984 |
7.2 |
2020-01-03 |
Cisco Data Center Network Manager getSMUTasks SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9041 |
Cisco |
CVE-2019-15984 |
7.2 |
2020-01-03 |
Cisco Data Center Network Manager ImageManagement SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9030 |
Cisco |
CVE-2019-15984 |
7.2 |
2020-01-03 |
Cisco Data Center Network Manager getTokenInfo SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9029 |
Cisco |
CVE-2019-15984 |
7.2 |
2020-01-03 |
Cisco Data Center Network Manager persistUserInfo SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-9139 |
Cisco |
CVE-2019-15981 |
6.5 |
2020-01-03 |
Cisco Data Center Network Manager readConfigFileFromDB Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-9130 |
Cisco |
CVE-2019-15981 |
7.1 |
2020-01-03 |
Cisco Data Center Network Manager ReportWS deleteReportTemplate Directory Traversal Denial-of-Service Vulnerability |
|||
ZDI-CAN-9038 |
Cisco |
CVE-2019-15977 |
6.5 |
2020-01-03 |
Cisco Data Center Network Manager JBoss_4_2Encrypter Hardcoded Cryptographic Key Information Disclosure Vulnerability |
|||
ZDI-CAN-9037 |
Cisco |
CVE-2019-15977 |
7.5 |
2020-01-03 |
Cisco Data Center Network Manager serverinfo Hardcoded Password Information Disclosure Vulnerability |
|||
ZDI-CAN-9025 |
Cisco |
CVE-2019-15980 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager DbAdminRest installSwitchLicense Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-9158 |
Cisco |
CVE-2019-15981 |
6.5 |
2020-01-03 |
Cisco Data Center Network Manager readConfigFileFromDBAsXML Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-9157 |
Cisco |
CVE-2019-15981 |
7.1 |
2020-01-03 |
Cisco Data Center Network Manager WebAnalysisWSService storeConfigToFS Directory Traversal Denial-of-Service Vulnerability |
|||
ZDI-CAN-9140 |
Cisco |
CVE-2019-15976 |
9.8 |
2020-01-03 |
Cisco Data Center Network Manager SecurityManager Hard-coded Cryptographic Key Authentication Bypass Vulnerability |
|||
ZDI-CAN-9035 |
Cisco |
CVE-2019-15980 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager reportTemplateUploadPolicy Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-9027 |
Cisco |
CVE-2019-15980 |
6.5 |
2020-01-03 |
Cisco Data Center Network Manager ConfigArchiveRest getRestoreLog Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-9026 |
Cisco |
CVE-2019-15980 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager DbAdminRest runZoneMigrationForBrocade Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-9024 |
Cisco |
CVE-2019-15980 |
8.8 |
2020-01-03 |
Cisco Data Center Network Manager DbAdminRest saveLicenseFileToServer Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-9021 |
Cisco |
CVE-2019-15975 |
9.8 |
2020-01-03 |
Cisco Data Center Network Manager TrustedClientTokenValidator Hard-coded Cryptographic Key Authentication Bypass Vulnerability |
|||
ZDI-CAN-9608 |
Microsoft |
3.1 |
2020-01-02 |
(0Day) Microsoft Outlook HTML Uninitialized Memory Information Disclosure Vulnerability |
||||
ZDI-CAN-8185 |
Microsoft |
4.3 |
2020-01-02 |
(0Day) Microsoft Windows Media Player Mpeg Audio Codec Out-Of-Bounds Read Information Disclosure Vulnerability |