3695 vulnerabilidades · General Orden: CVSS EPSS Año ID
CVE-2020-7714
confucious General
9.8
CRITICAL
EPSS
0.4%
2020 2 PoCs

All versions of package confucious are vulnerable to Prototype Pollution via the set function.

Scanner Automatizado
Sin template local disponible
CVE-2020-11651
🔥 KEV Software Genérico General
9.8
CRITICAL
EPSS
94.2%
2020 14 PoCs

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions.

Scanner Automatizado
Sin template local disponible
CVE-2020-7707
property-expr General
9.8
CRITICAL
EPSS
2.1%
2020 3 PoCs

The package property-expr before 2.0.3 are vulnerable to Prototype Pollution via the setter function.

Scanner Automatizado
Sin template local disponible
CVE-2020-14439
Software Genérico General
9.6
CRITICAL
EPSS
0.6%
2020 1 PoC

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25.

Scanner Automatizado
Sin template local disponible
CVE-2020-14431
Software Genérico General
9.6
CRITICAL
EPSS
0.1%
2020 1 PoC

Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25.

Scanner Automatizado
Sin template local disponible
CVE-2020-26904
Software Genérico General
9.6
CRITICAL
EPSS
0.2%
2020 1 PoC

Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, and RBS850 before 3.2.10.11.

Scanner Automatizado
Sin template local disponible
CVE-2020-7750
scratch-svg-renderer General
9.6
CRITICAL
EPSS
6.2%
2020 2 PoCs

This affects the package scratch-svg-renderer before 0.2.0-prerelease.20201019174008. The loadString function does not escape SVG properly, which can be used to inject arbitrary elements into the DOM via the _transformMeasurements function.

Scanner Automatizado
Sin template local disponible
CVE-2020-26905
Software Genérico General
9.6
CRITICAL
EPSS
0.1%
2020 1 PoC

Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, and RBS850 before 3.2.10.11.

Scanner Automatizado
Sin template local disponible
CVE-2020-11059
AEgir General
9.6
CRITICAL
EPSS
0.4%
2020 CWE-200 1 PoC

In AEgir greater than or equal to 21.7.0 and less than 21.10.1, aegir publish and aegir build may leak secrets from environment variables in the browser bundle published to npm. This has been fixed in 21.10.1.

Scanner Automatizado
Sin template local disponible
CVE-2020-15744
PC420 General
9.6
CRITICAL
EPSS
0.5%
2020 CWE-121 1 PoC

Stack-based Buffer Overflow vulnerability in the ONVIF server component of Victure PC420 smart camera allows an attacker to execute remote code on the target device. This issue affects: Victure PC420 firmware version 1.2.2 and prior versions.

Scanner Automatizado
Sin template local disponible
CVE-2020-14429
Software Genérico General
9.6
CRITICAL
EPSS
0.2%
2020 1 PoC

Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects MK62 before 1.0.4.92, MK63 before 1.0.4.92, MR60 before 1.0.4.92, MS60 before 1.0.4.92, RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBS750 before 3.2.15.25, RBR750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25.

Scanner Automatizado
Sin template local disponible
CVE-2020-9002
Software Genérico General
9.6
CRITICAL
EPSS
0.3%
2020 2 PoCs

An issue was discovered in iPortalis iCS 7.1.13.0. An attacker can gain privileges by intercepting a request and changing UserRoleKey=COMPANY_ADMIN to UserRoleKey=DOMAIN_ADMIN (to achieve Domain Administrator access).

Scanner Automatizado
Sin template local disponible
CVE-2020-14440
Software Genérico General
9.6
CRITICAL
EPSS
1.2%
2020 1 PoC

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25.

Scanner Automatizado
Sin template local disponible
CVE-2020-14428
Software Genérico General
9.6
CRITICAL
EPSS
0.2%
2020 1 PoC

Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK842 before 3.2.15.25, RBR840 before 3.2.15.25, RBS840 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25.

Scanner Automatizado
Sin template local disponible
CVE-2020-26901
Software Genérico General
9.6
CRITICAL
EPSS
0.1%
2020 1 PoC

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25.

Scanner Automatizado
Sin template local disponible
CVE-2020-26907
Software Genérico General
9.6
CRITICAL
EPSS
0.4%
2020 1 PoC

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, and RBS850 before 3.2.16.6.

Scanner Automatizado
Sin template local disponible
CVE-2020-26928
Software Genérico General
9.6
CRITICAL
EPSS
0.1%
2020 1 PoC

Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, and RBS850 before 3.2.10.11.

Scanner Automatizado
Sin template local disponible
CVE-2020-25067
Software Genérico General
9.6
CRITICAL
EPSS
1.2%
2020 1 PoC

NETGEAR R8300 devices before 1.0.2.134 are affected by command injection by an unauthenticated attacker.

Scanner Automatizado
Sin template local disponible
CVE-2020-28589
tinyobjloader General
9.6
CRITICAL
EPSS
0.8%
2020 CWE-129 2 PoCs

An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Scanner Automatizado
Sin template local disponible