|
211781
|
5.5 |
MEDIUM
Local
|
gradle
|
enterprise
|
An issue was discovered in Gradle Enterprise 2018.5. An attacker can potentially make repeated attempts to guess a local user's password, due to lack of lock-out after excessive failed logins.
|
CWE-307
mproper Restriction of Excessive Authentication Attempts
|
CVE-2020-15770
|
2024-11-21 14:06 |
2020-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211782
|
6.1 |
MEDIUM
Network
|
gradle
|
enterprise
|
An issue was discovered in Gradle Enterprise 2020.2 - 2020.2.4. An XSS issue exists via the request URL.
|
CWE-79
Cross-site Scripting
|
CVE-2020-15769
|
2024-11-21 14:06 |
2020-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211783
|
5.3 |
MEDIUM
Network
|
gradle
|
enterprise
|
An issue was discovered in Gradle Enterprise before 2020.2.5. The cookie used to convey the CSRF prevention token is not annotated with the “secure” attribute, which allows an attacker with the abili…
|
CWE-311
Missing Encryption of Sensitive Data
|
CVE-2020-15767
|
2024-11-21 14:06 |
2020-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211784
|
7.5 |
HIGH
Network
|
gradle
|
enterprise_cache_node enterprise
|
An issue was discovered in Gradle Enterprise 2017.3 - 2020.2.4 and Gradle Enterprise Build Cache Node 1.0 - 9.2. Unrestricted HTTP header reflection in Gradle Enterprise allows remote attackers to ob…
|
NVD-CWE-Other
|
CVE-2020-15768
|
2024-11-21 14:06 |
2020-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211785
|
7.5 |
HIGH
Network
|
wibu
|
codemeter
|
An attacker could send a specially crafted packet that could have CodeMeter (All versions prior to 7.10) send back packets containing data from the heap.
|
-
|
CVE-2020-16233
|
2024-11-21 14:06 |
2020-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211786
|
7.5 |
HIGH
Network
|
gallagher
|
command_centre
|
It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service due to an out-of-bounds buffer access. Affected versions are v8.20 prior to v8.20.1166(MR3),…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-16101
|
2024-11-21 14:06 |
2020-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211787
|
7.5 |
HIGH
Network
|
gallagher
|
command_centre
|
It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service's DCOM websocket thread due to improper shutdown of closed websocket connections, preventing…
|
CWE-404
Improper Resource Shutdown or Release
|
CVE-2020-16100
|
2024-11-21 14:06 |
2020-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211788
|
4.3 |
MEDIUM
Network
|
gallagher
|
command_centre
|
In Gallagher Command Centre v8.20 prior to v8.20.1093(MR2) it is possible to create Guard Tour events that when accessed via things like reporting cause clients to temporarily hang or disconnect.
|
NVD-CWE-noinfo
|
CVE-2020-16099
|
2024-11-21 14:06 |
2020-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211789
|
9.8 |
CRITICAL
Network
|
gallagher
|
command_centre
|
It is possible to enumerate access card credentials via an unauthenticated network connection to the server in versions of Command Centre v8.20 prior to v8.20.1166(MR3), versions of 8.10 prior to v8.…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2020-16098
|
2024-11-21 14:06 |
2020-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211790
|
4.6 |
MEDIUM
Physics
|
gallagher
|
command_centre
|
On controllers running versions of v8.20 prior to vCR8.20.200221b (distributed in v8.20.1093(MR2)), v8.10 prior to vGR8.10.179 (distributed in v8.10.1211(MR5)), v8.00 prior to vGR8.00.165 (Distribute…
|
NVD-CWE-noinfo
|
CVE-2020-16097
|
2024-11-21 14:06 |
2020-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|