|
210761
|
6.1 |
MEDIUM
Network
|
apache
oracle
|
activemq
flexcube_private_banking
enterprise_repository
communications_element_manager
communications_diameter_signaling_router
communications_session_report_manager
communications_…
|
In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue.
|
CWE-79
Cross-site Scripting
|
CVE-2020-1941
|
2024-11-21 14:11 |
2020-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210762
|
6.3 |
MEDIUM
Local
|
apache
canonical
fedoraproject
opensuse
oracle
|
ant
ubuntu_linux
fedora
leap
flexcube_investor_servicing
flexcube_private_banking
primavera_unifier
retail_integration_bus
retail_store_inventory_management
enterprise_repo…
|
Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The…
|
CWE-668
Exposure of Resource to Wrong Sphere
|
CVE-2020-1945
|
2024-11-21 14:11 |
2020-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210763
|
6.1 |
MEDIUM
Network
|
paloaltonetworks
|
pan-os
|
An open redirection vulnerability in the GlobalProtect component of Palo Alto Networks PAN-OS allows an attacker to specify an arbitrary redirection target away from the trusted GlobalProtect gateway…
|
CWE-601
Open Redirect
|
CVE-2020-1997
|
2024-11-21 14:11 |
2020-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210764
|
8.8 |
HIGH
Network
|
paloaltonetworks
|
pan-os
|
An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of the intended SAML permissions of the account when the username is shared for the…
|
CWE-863
Incorrect Authorization
|
CVE-2020-1998
|
2024-11-21 14:11 |
2020-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210765
|
5.3 |
MEDIUM
Network
|
paloaltonetworks
|
pan-os
|
A missing authorization vulnerability in the management server component of PAN-OS Panorama allows a remote unauthenticated user to inject messages into the management server ms.log file. This vulner…
|
CWE-862
Missing Authorization
|
CVE-2020-1996
|
2024-11-21 14:11 |
2020-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210766
|
4.9 |
MEDIUM
Network
|
paloaltonetworks
|
pan-os
|
A NULL pointer dereference vulnerability in Palo Alto Networks PAN-OS allows an authenticated administrator to send a request that causes the rasmgr daemon to crash. Repeated attempts to send this re…
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-1995
|
2024-11-21 14:11 |
2020-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210767
|
4.4 |
MEDIUM
Local
|
paloaltonetworks
|
pan-os
|
A predictable temporary file vulnerability in PAN-OS allows a local authenticated user with shell access to corrupt arbitrary system files affecting the integrity of the system. This issue affects: A…
|
NVD-CWE-Other
|
CVE-2020-1994
|
2024-11-21 14:11 |
2020-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210768
|
5.4 |
MEDIUM
Network
|
paloaltonetworks
|
pan-os
|
The GlobalProtect Portal feature in PAN-OS does not set a new session identifier after a successful user login, which allows session fixation attacks, if an attacker is able to control a user's sessi…
|
CWE-384
Session Fixation
|
CVE-2020-1993
|
2024-11-21 14:11 |
2020-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210769
|
8.8 |
HIGH
Network
|
redhat
quarkus
|
keycloak
decision_manager
single_sign-on
jboss_fuse
process_automation
openshift_application_runtimes
quarkus
|
A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without type checks. This flaw allows an attacker to inject arbitrarily serialized Java Ob…
|
CWE-20
Improper Input Validation
|
CVE-2020-1714
|
2024-11-21 14:11 |
2020-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210770
|
8.8 |
HIGH
Network
|
redhat
|
keycloak
jboss_fuse
openshift_application_runtimes
|
A flaw was found in the reset credential flow in all Keycloak versions before 8.0.0. This flaw allows an attacker to gain unauthorized access to the application.
|
CWE-287
Improper Authentication
|
CVE-2020-1718
|
2024-11-21 14:11 |
2020-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
