|
211051
|
3.3 |
LOW
Local
|
jetbrains
|
youtrack
|
Sensitive information could be disclosed in the JetBrains YouTrack application before 2020.2.0 for Android via application backups.
|
NVD-CWE-noinfo
|
CVE-2020-24366
|
2024-11-21 14:14 |
2020-11-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211052
|
7.8 |
HIGH
Local
|
intel
|
nuc_8_mainstream-g_kit_nuc8i5inh_firmware nuc_8_mainstream-g_kit_nuc8i7inh_firmware nuc_8_mainstream-g_mini_pc_nuc8i5inh_firmware nuc_8_mainstream-g_mini_pc_nuc8i7inh_firmware nuc_8_pro_b…
|
Insecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation of privilege via local access.
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2020-24525
|
2024-11-21 14:14 |
2020-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211053
|
5.5 |
MEDIUM
Local
|
intel
|
driver_\&_support_assistant
|
Incorrect default permissions in the Intel(R) DSA before version 20.8.30.6 may allow an authenticated user to potentially enable denial of service via local access.
|
CWE-276
Incorrect Default Permissions
|
CVE-2020-24460
|
2024-11-21 14:14 |
2020-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211054
|
7.8 |
HIGH
Local
|
intel
|
board_id_tool
|
Incorrect default permissions in the Intel(R) Board ID Tool version v.1.01 may allow an authenticated user to potentially enable escalation of privilege via local access.
|
CWE-276
Incorrect Default Permissions
|
CVE-2020-24456
|
2024-11-21 14:14 |
2020-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211055
|
7.5 |
HIGH
Network
|
intel
|
quartus_prime
|
Improper Restriction of XML External Entity Reference in subsystem forIntel(R) Quartus(R) Prime Pro Edition before version 20.3 and Intel(R) Quartus(R) Prime Standard Edition before version 20.2 may …
|
CWE-611
XXE
|
CVE-2020-24454
|
2024-11-21 14:14 |
2020-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211056
|
6.1 |
MEDIUM
Network
|
adobe
|
connect
|
Adobe Connect version 11.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page,…
|
-
|
CVE-2020-24443
|
2024-11-21 14:14 |
2020-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211057
|
6.1 |
MEDIUM
Network
|
adobe
|
connect
|
Adobe Connect version 11.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page,…
|
-
|
CVE-2020-24442
|
2024-11-21 14:14 |
2020-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211058
|
5.5 |
MEDIUM
Local
|
adobe
|
acrobat_reader
|
Adobe Acrobat Reader for Android version 20.6.2 (and earlier) does not properly restrict access to directories created by the application. This could result in disclosure of sensitive information sto…
|
NVD-CWE-Other
|
CVE-2020-24441
|
2024-11-21 14:14 |
2020-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211059
|
7.8 |
HIGH
Local
|
bluestacks
|
bluestacks
|
Incorrect file permissions in BlueStacks 4 through 4.230 on Windows allow a local attacker to escalate privileges by modifying a file that is later executed by a higher-privileged user.
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2020-24367
|
2024-11-21 14:14 |
2020-11-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211060
|
7.2 |
HIGH
Network
|
canto
|
canto
|
The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF.
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2020-24063
|
2024-11-21 14:14 |
2020-11-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|