cve-2020-5902 vulnerabilities and exploits

(subscribe to this query)

6.8

CVSSv2

In TopManage OLK 2020, login CSRF can be chained with another vulnerability in order to takeover admin and user accounts....

Topmanage Olk Webstore 2020

7.5

CVSSv2

Buffer overflow in the xrdp_bitmap_invalidate function in xrdp/xrdp_bitmap.c in xrdp 0.4.1 and earlier allows remote attackers to execute arbitrary code via a crafted request....

Xrdp Xrdp 0.3 Xrdp Xrdp 0.3.1 Xrdp Xrdp 0.3.2 Xrdp Xrdp 0.4 Xrdp Xrdp

9.3

CVSSv2

An Untrusted Search Path vulnerability in the ServiceInstance.dll library versions 1.0.15.119 and lower, as used in Bitdefender Antivirus Free 2020 versions prior to 1.0.15.138, allows an attacker to load an arbitrary DLL file from the search path....

Bitdefender Antivirus 20205 Articles available

3.6

CVSSv2

A vulnerability in the improper handling of symbolic links in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location. This issue affects Bitdefender Antivirus Free versions prior to 1.0.17.178....

Bitdefender Antivirus 20206 Github repositories available

4.6

CVSSv2

A vulnerability in the improper handling of junctions in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location. This issue affects: Bitdefender Antivirus Free versions prior to 1.0.17....

Bitdefender Antivirus 2020

5

CVSSv2

In the Voatz application 2020-01-01 for Android, the amount of data transmitted during a single voter's vote depends on the different lengths of the metadata across the available voting choices, which makes it easier for remote attackers to discover this voter's choice...

Voatz Voatz 2020-01-01

7.5

CVSSv2

Rubetek SmartHome 2020 devices use unencrypted 433 MHz communication between controllers and beacons, allowing an attacker to sniff and spoof beacon requests remotely....

Rubetek Smarthome Firmware 2020

4.3

CVSSv2

An issue was discovered in TopManage OLK 2020. As there is no ReadOnly on the Session cookie, the user and admin accounts can be taken over in a DOM-Based XSS attack....

Topmanage Olk Webstore 2020

2.1

CVSSv2

Trend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in a specific kernel extension where an attacker could supply a kernel pointer and leak several bytes of memory. An attacker must first obtain the ability to execute high-privileged code on the target system in...

Trendmicro Antivirus 2019 Trendmicro Antivirus 2020

4.4

CVSSv2

An Untrusted Search Path vulnerability in bdserviceshost.exe as used in Bitdefender Total Security 2020 allows an attacker to execute arbitrary code. This issue does not affect: Bitdefender Total Security versions prior to 24.0.12.69....

Bitdefender Total Security 2020

« PREV 1 2 3 4 5 6 7 8 NEXT »