Skip to main content
CVE-2020-25645 HIGH POC This Week

A flaw was found in the Linux kernel in versions before 5.9-rc7. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Linux Information Disclosure Linux Kernel Debian Linux Solidfire Hci Management Node +4
NVD
CVSS 3.1
7.5
EPSS
2.4%
CVE-2020-7743 HIGH POC PATCH This Week

The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Prototype Pollution Information Disclosure Mathjs
NVD GitHub
CVSS 3.1
7.3
EPSS
3.9%
CVE-2020-17406 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE prior to v1.2.0-r1112. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Command Injection Bullet Lte Firmware
NVD
CVSS 3.1
8.8
EPSS
5.3%
CVE-2020-12928 HIGH PATCH This Week

A vulnerability in a dynamically loaded AMD driver in AMD Ryzen Master V15 may allow any authenticated user to escalate privileges to NT authority system. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Privilege Escalation Amd Ryzen Master
NVD
CVSS 3.1
7.8
EPSS
1.3%
CVE-2020-17417 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Use After Free Memory Corruption RCE Foxit Reader Phantompdf
NVD
CVSS 3.1
7.8
EPSS
9.1%
CVE-2020-17416 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.0.35798. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow RCE Memory Corruption Foxit Reader Phantompdf
NVD
CVSS 3.1
7.8
EPSS
9.1%
CVE-2020-17415 HIGH This Week

This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PhantomPDF 10.0.0.35798. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Foxit Reader Phantompdf
NVD
CVSS 3.1
7.8
EPSS
2.1%
CVE-2020-17414 HIGH This Week

This vulnerability allows local attackers to escalate privileges on affected installations of Foxit Reader 10.0.0.35798. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Foxit Reader Phantompdf
NVD
CVSS 3.1
7.8
EPSS
1.9%
CVE-2020-17413 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow RCE Stack Overflow 3D
NVD
CVSS 3.1
7.8
EPSS
4.2%
CVE-2020-17412 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow RCE Memory Corruption 3D
NVD
CVSS 3.1
7.8
EPSS
4.2%
CVE-2020-17410 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Use After Free Memory Corruption RCE Foxit Reader Phantompdf
NVD
CVSS 3.1
7.8
EPSS
9.1%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy