Document Title:
===
LANCOM WLAN Controller - Multiple Cross Site Vulnerabilities
References (Source):
https://www.vulnerability-lab.com/get_content.php?id=2196
Vulnerability Magazine:
https://www.vulnerability-db.com/?q=articles/2020/05/07/vulnerability-lancom-sy
Document Title:
===
Tiny MySQL - Cross Site Scripting Vulnerability
References (Source):
https://www.vulnerability-lab.com/get_content.php?id=2252
Release Date:
=
2020-05-07
Vulnerability Laboratory ID (VL-ID):
Document Title:
===
Wordpress Theme Dosimple v2.0 - XSS Web Vulnerability
References (Source):
https://www.vulnerability-lab.com/get_content.php?id=2251
Release Date:
=
2020-05-07
Vulnerability Laboratory ID (VL-ID):
===
Document Title:
===
Creative Zone - (id) Remote SQL Injection Vulnerability
References (Source):
https://www.vulnerability-lab.com/get_content.php?id=2250
Release Date:
=
2020-05-07
Vulnerability Laboratory ID (VL-ID):
=
Greetings,
We are happy to announce version 4.0.2 of Capstone disassembler framework!
This release fixes some bugs of v4.0.1, and introduces some
improvements for several bindings. We strongly encourage all users of
v4.0.1 to upgrade.
In no particular order, we would like to thank Senrio.io and
ChopSlider3 Wordpress Plugin SQL Injection
[-] Software Link:
https://idangero.us/
https://github.com/idangerous/Plugins
[-] Affected Versions:
ChopSlider version 3
Title: SolarWinds MSP PME Cache Service - Insecure File Permissions /
Code Execution
Author: Jens Regel, Schneider & Wulf EDV-Beratung GmbH & Co. KG
GitHub: https://github.com/jensregel/Advisories/tree/master/CVE-2020-12608
CVSSv3: 8.2 [CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H]
CVE: CVE-2020-12
Document Title:
===
Webmin 1.941 (Install Module) Remote Command Injection Vulnerability
Common Vulnerability Scoring System:
8.5
Vulnerability Class:
Command Injection
Current Estimated Price:
2.0
XL-2020-001 - DataSecurity Plus Xnode Server - Remote Code Execution via Path
Traversal
===
Identifiers
-
* CVE-2020-11531
* XL-20-001
CVSSv3 score
---
XL-2020-002 - DataSecurity Plus Xnode Server - Authentication Bypass
===
Identifiers
-
* CVE-2020-11532
* XL-20-002
CVSSv3 score
---
XL-2020-003 - Asset Explorer Windows Agent - Remote Code Execution
===
Identifiers
-
* CVE-2020-8838
* XL-20-003
CVSSv3 score
--
11 matches
Mail list logo