Menu

Star on GitHub · 3.2k

2020

18,349 vulnerabilities published in 2020.

Results

7,678 of 18,349· Page 99/154
7.2
CVE-2018-21177

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befor

7.2
CVE-2018-21176

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befor

7.2
CVE-2018-21175

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befor

7.2
CVE-2018-21174

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befor

8.8
CVE-2018-21170

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects EX270

8.8
CVE-2018-21169

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7000 before 2018-03-

7.5
CVE-2018-21168

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D7000 before 1.0.1.52, D7800 b

8.8
CVE-2018-21158

NETGEAR R7800 devices before 1.0.2.46 are affected by incorrect configuration of security settings.

7.2
CVE-2018-21156

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.38,

8.0
CVE-2018-21100

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

8.0
CVE-2018-21099

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

8.8
CVE-2020-11941

An issue was discovered in Open-AudIT 3.2.2. There is OS Command injection in Discovery.

7.5
CVE-2019-15234

SHAREit through 4.0.6.177 does not check the full message length from the received packet header (which is used to alloc

7.5
CVE-2019-14941

SHAREit through 4.0.6.177 does not check the body length from the received packet header (which is used to allocate memo

7.4
CVE-2018-21096

Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0

7.8
CVE-2020-7135

A potential security vulnerability has been identified in the disk drive firmware installers named Supplemental Update /

7.1
CVE-2020-1806

Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities.

7.1
CVE-2020-1805

Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities.

7.1
CVE-2020-1804

Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities.

7.5
CVE-2020-12266

An issue was discovered where there are multiple externally accessible pages that do not require any sort of authenticat

7.8
CVE-2020-12242

Valve Source allows local users to gain privileges by writing to the /tmp/hl2_relaunch file, which is later executed in

8.8
CVE-2020-12138

AMD ATI atillk64.sys 5.11.9.0 allows low-privileged users to interact directly with physical memory by calling one of se

7.5
CVE-2020-12120

The Correos Express addon for PrestaShop 1.6 through 1.7 allows remote attackers to obtain sensitive information, such a

7.8
CVE-2019-20002

Formula Injection exists in the export feature in SolarWinds WebHelpDesk 12.7.1 via a value (provided by a low-privilege

7.3
CVE-2018-21094

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC120 before 2.1.7,

8.8
CVE-2018-21093

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D8500

7.5
CVE-2020-12273

In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials.

8.1
CVE-2020-10996

An issue was discovered in Percona XtraDB Cluster before 5.7.28-31.41.2. A bundled script inadvertently sets a static tr

7.5
CVE-2020-10664

The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference.

7.8
CVE-2020-12254

Avira Antivirus before 5.0.2003.1821 on Windows allows privilege escalation or a denial of service via abuse of a symlin

7.5
CVE-2020-12070

The Advanced Woo Search plugin version through 1.99 for Wordpress suffers from a sensitive information disclosure vulner

7.7
CVE-2020-11004

SQL Injection was discovered in Admidio before version 3.3.13. The main cookie parameter is concatenated into a SQL quer

8.5
CVE-2020-11013

Their is an information disclosure vulnerability in Helm from version 3.1.0 and before version 3.2.0. `lookup` is a Helm

7.5
CVE-2020-6828

A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potentia

8.8
CVE-2020-6822

On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in <code>GMPDecod

7.5
CVE-2020-6821

When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method,

8.1
CVE-2020-6820KEV

Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of t

8.1
CVE-2020-6819KEV

Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aw

8.8
CVE-2019-4750

IBM Cloud App Management 2019.3.0 and 2019.4.0 is vulnerable to cross-site request forgery which could allow an attacker

8.8
CVE-2017-18705

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.28

8.8
CVE-2017-18703

Certain NETGEAR devices are affected by CSRF. This affects D1500 before 1.0.0.25, D500 before 1.0.0.25, D6100 before 1.0

8.1
CVE-2020-5870

In BIG-IQ 5.2.0-7.0.0, high availability (HA) synchronization mechanisms do not use any form of authentication for conne

8.8
CVE-2017-18727

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200

8.8
CVE-2017-18726

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects R6020

8.8
CVE-2017-18725

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200

8.8
CVE-2017-18724

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200

8.8
CVE-2017-18723

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200

8.8
CVE-2017-18722

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200

8.8
CVE-2017-18721

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200

8.8
CVE-2017-18720

Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0

Test your stack for 2020issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.