|
199411
|
8.6 |
HIGH
Network
|
cdnetworks
|
aquanplayer
|
There is a directory traversing vulnerability in the download page url of AquaNPlayer 2.0.0.92. The IP of the download page url is localhost and an attacker can traverse directories using "dot dot" s…
|
CWE-22
Path Traversal
|
CVE-2020-7858
|
2024-11-21 14:37 |
2021-04-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199412
|
9.8 |
CRITICAL
Network
|
tobesoft
|
xplatform
|
A vulnerability of XPlatform could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficient validation of improper classes. This issue affects: To…
|
CWE-20
Improper Input Validation
|
CVE-2020-7857
|
2024-11-21 14:37 |
2021-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199413
|
9.8 |
CRITICAL
Network
|
cnesty
|
helpcom
|
A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficient authentication validation.
|
CWE-287
Improper Authentication
|
CVE-2020-7856
|
2024-11-21 14:37 |
2021-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199414
|
7.8 |
HIGH
Local
|
innorix
|
file_transfer_solution
|
Innorix Web-Based File Transfer Solution versuibs prior to and including 9.2.18.385 contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to th…
|
CWE-88
Argument Injection
|
CVE-2020-7851
|
2024-11-21 14:37 |
2021-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199415
|
6.5 |
MEDIUM
Network
|
mcafee
|
endpoint_security
|
Cleartext Transmission of Sensitive Information between McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update and McAfee Global Threat Intelligence (GTI) servers using DNS a…
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2020-7308
|
2024-11-21 14:37 |
2021-04-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199416
|
7.8 |
HIGH
Local
|
douzone
|
nbbdownloader.ocx
|
NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker c…
|
CWE-88
Argument Injection
|
CVE-2020-7850
|
2024-11-21 14:37 |
2021-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199417
|
8.8 |
HIGH
Network
|
freebsd
|
freebsd
|
In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a ftpd(8) bug in the implementation of the file system s…
|
NVD-CWE-Other
|
CVE-2020-7468
|
2024-11-21 14:37 |
2021-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199418
|
7.6 |
HIGH
Physics
|
freebsd
|
freebsd
|
In FreeBSD 12.2-STABLE before r365767, 11.4-STABLE before r365769, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a number of AMD virtualization instructions operate on h…
|
CWE-269
Improper Privilege Management
|
CVE-2020-7467
|
2024-11-21 14:37 |
2021-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199419
|
5.5 |
MEDIUM
Local
|
freebsd
apple
|
freebsd
safari
macos
icloud
itunes
iphone_os
tvos
watchos
ipados
|
In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel causes a use-after-free…
|
CWE-416
Use After Free
|
CVE-2020-7463
|
2024-11-21 14:37 |
2021-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199420
|
5.3 |
MEDIUM
Network
|
freebsd
|
freebsd
|
In FreeBSD 12.2-STABLE before r365730, 11.4-STABLE before r365738, 12.1-RELEASE before p10, 11.4-RELEASE before p4, and 11.3-RELEASE before p14, a programming error in the ure(4) device driver caused…
|
CWE-74
Injection
|
CVE-2020-7464
|
2024-11-21 14:37 |
2021-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
