|
210751
|
4.6 |
MEDIUM
Physics
|
huawei
|
mate_10_firmware
|
HUAWEI Mate 10 smartphones with versions earlier than 10.0.0.143(C00E143R2P4) have an information disclosure vulnerability. The attacker could wake up voice assistant then do a series of crafted voic…
|
NVD-CWE-noinfo
|
CVE-2020-1809
|
2024-11-21 14:11 |
2020-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210752
|
2.4 |
LOW
Physics
|
huawei
|
mate_20_firmware
|
HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185(C00E74R3P8) have an improper authorization vulnerability. The system does not properly restrict certain operation in ADB mode, success…
|
NVD-CWE-noinfo
|
CVE-2020-1797
|
2024-11-21 14:11 |
2020-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210753
|
4.6 |
MEDIUM
Physics
|
huawei
|
p30_firmware
|
HUAWEI P30 smartphones with versions earlier than 10.1.0.135(C00E135R2P11) have an improper authentication vulnerability. A logic error occurs when handling NFC work, an attacker should establish a N…
|
CWE-287
Improper Authentication
|
CVE-2020-1798
|
2024-11-21 14:11 |
2020-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210754
|
7.5 |
HIGH
Adjacent
|
huawei
|
e6878-370_firmware
|
E6878-370 with versions of 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00), 10.0.3.1(H563SP1C233) has a use after free vulnerability. The software references memory after it has been freed in certain sc…
|
CWE-416
Use After Free
|
CVE-2020-1799
|
2024-11-21 14:11 |
2020-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210755
|
9.8 |
CRITICAL
Network
|
apache
|
couchdb
|
CouchDB version 3.0.0 shipped with a new configuration setting that governs access control to the entire database server called `require_valid_user_except_for_up`. It was meant as an extension to the…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2020-1955
|
2024-11-21 14:11 |
2020-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210756
|
7.5 |
HIGH
Network
|
redhat fedoraproject
|
resteasy fedora
|
A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, where an improper input validation results in returning an illegal header t…
|
NVD-CWE-Other
|
CVE-2020-1695
|
2024-11-21 14:11 |
2020-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210757
|
9.8 |
CRITICAL
Network
|
facebook
|
proxygen
|
A use-after-free is possible due to an error in lifetime management in the request adaptor when a malicious client invokes request error handling in a specific sequence. This issue affects versions o…
|
CWE-416
Use After Free
|
CVE-2020-1897
|
2024-11-21 14:11 |
2020-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210758
|
5.9 |
MEDIUM
Network
|
redhat
|
keycloak openstack
|
A flaw was found in Keycloak in versions before 10.0.0, where it does not perform the TLS hostname verification while sending emails using the SMTP server. This flaw allows an attacker to perform a m…
|
CWE-295
Improper Certificate Validation
|
CVE-2020-1758
|
2024-11-21 14:11 |
2020-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210759
|
7.1 |
HIGH
Local
|
huawei
|
honor_view_20_firmware honor_20_firmware honor_20_pro_firmware honor_magic2_firmware
|
Honor 20;HONOR 20 PRO;Honor Magic2;HUAWEI Mate 20 X;HUAWEI P30;HUAWEI P30 Pro;Honor View 20 smartphones with versions earlier than 10.0.0.187(C00E60R4P11); versions earlier than 10.0.0.187(C00E60R4P1…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-1808
|
2024-11-21 14:11 |
2020-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210760
|
4.7 |
MEDIUM
Local
|
apache
|
flink
|
A vulnerability in Apache Flink (1.1.0 to 1.1.5, 1.2.0 to 1.2.1, 1.3.0 to 1.3.3, 1.4.0 to 1.4.2, 1.5.0 to 1.5.6, 1.6.0 to 1.6.4, 1.7.0 to 1.7.2, 1.8.0 to 1.8.3, 1.9.0 to 1.9.2, 1.10.0) where, when ru…
|
NVD-CWE-noinfo
|
CVE-2020-1960
|
2024-11-21 14:11 |
2020-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|