Search vulnerabilities

Expected end of text, found ':' (at char 25), (line:1, col:26)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,120

CVE-2020-17365

Improper directory permissions in the Hotspot Shield VPN client software for Windows 10.3.0 and earlier may allow an authorized user to potentially enable escalation of privilege via local access. The vulnerability allows a local user to corrupt system files: a local user can create a specially crafted symbolic link to a critical file on the system and overwrite it with privileges of the application.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Pango
Products
Hotspot Shield
CVE-2020-17363

USVN (aka User-friendly SVN) before 1.0.9 allows remote code execution via shell metacharacters in the number_start or number_end parameter to LastHundredRequest (aka lasthundredrequestAction) in the Timeline module. NOTE: this may overlap CVE-2020-25069.

CVSS 3.1 · 9.9 Critical EPSS 4.6% KEV · Not listed
Vendors
Usvn
Products
Usvn
CVE-2020-17361

An issue was discovered in ReadyTalk Avian 1.2.0. The vm::arrayCopy method defined in classpath-common.h returns silently when a negative length is provided (instead of throwing an exception). This could result in data being lost during the copy, with varying consequences depending on the subsequent use of the destination buffer. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

CVSS 3.1 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Readytalk
Products
Avian
CVE-2020-17360

An issue was discovered in ReadyTalk Avian 1.2.0. The vm::arrayCopy method defined in classpath-common.h contains multiple boundary checks that are performed to prevent out-of-bounds memory read/write. However, two of these boundary checks contain an integer overflow that leads to a bypass of these checks, and out-of-bounds read/write. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

CVSS 3.1 · 7.8 High EPSS 1.2% KEV · Not listed
Vendors
Readytalk
Products
Avian
CVE-2020-17355

Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause a denial of service (restart of agents) by crafting a malformed DHCP packet which leads to an incorrect route being installed.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Arista
Products
Eos
CVE-2020-17353

scm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x through 2.21.4, when -dsafe is used, lacks restrictions on embedded-ps and embedded-svg, as demonstrated by including dangerous PostScript code.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Debian Fedoraproject Lilypond and 1 more
Products
Debian Linux Fedora Lilypond and 2 more
CVE-2020-17352

Two OS command injection vulnerabilities in the User Portal of Sophos XG Firewall through 2020-08-05 potentially allow an authenticated attacker to remotely execute arbitrary code.

CVSS 3.1 · 8.8 High EPSS 4.1% KEV · Not listed
Vendors
Sophos
Products
Xg Firewall Firmware
CVE-2020-17104

Visual Studio Code JSHint Extension Remote Code Execution Vulnerability

Visual Studio Code JSHint Extension Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 3.8% KEV · Not listed
Vendors
Microsoft
Products
Visual Studio Code