|
197631
|
7.8 |
HIGH
Local
|
kia
|
head_unit_firmware
|
Kia Motors Head Unit with Software version: SOP.003.30.18.0703, SOP.005.7.181019, and SOP.007.1.191209 may allow an attacker to inject unauthorized commands, by executing the micomd executable deamon…
|
CWE-276
Incorrect Default Permissions
|
CVE-2020-8539
|
2024-11-21 14:38 |
2020-12-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197632
|
7.8 |
HIGH
Local
|
lenovo
|
pcmanager
|
A privilege escalation vulnerability was reported in Lenovo PCManager prior to version 3.0.50.9162 that could allow an authenticated user to execute code with elevated privileges.
|
CWE-269
Improper Privilege Management
|
CVE-2020-8351
|
2024-11-21 14:38 |
2020-12-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197633
|
6.5 |
MEDIUM
Network
|
mongodb
|
ops_manager
|
Specially crafted API calls may allow an authenticated user who holds Organization Owner privilege to obtain an API key with Global Role privilege. This issue affects MongoDB Ops Manager v4.2 version…
|
NVD-CWE-noinfo
|
CVE-2020-7927
|
2024-11-21 14:38 |
2020-11-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197634
|
6.5 |
MEDIUM
Network
|
mongodb
|
mongodb
|
A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects MongoDB Server v4.4 versions prior to 4.4…
|
NVD-CWE-Other
|
CVE-2020-7928
|
2024-11-21 14:38 |
2020-11-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197635
|
6.5 |
MEDIUM
Network
|
mongodb
|
mongodb
|
A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant in the server selection subsystem. This issue affects MongoD…
|
CWE-755
Improper Handling of Exceptional Conditions
|
CVE-2020-7926
|
2024-11-21 14:38 |
2020-11-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197636
|
7.5 |
HIGH
Network
|
mongodb
|
mongodb
|
Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted request to cause a denial of service…
|
CWE-20
Improper Input Validation
|
CVE-2020-7925
|
2024-11-21 14:38 |
2020-11-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197637
|
7.4 |
HIGH
Network
|
nextcloud
|
social
|
Missing validation of server certificates for out-going connections in Nextcloud Social < 0.4.0 allowed a man-in-the-middle attack.
|
CWE-295
Improper Certificate Validation
|
CVE-2020-8279
|
2024-11-21 14:38 |
2020-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197638
|
5.3 |
MEDIUM
Network
|
nextcloud
|
social
|
Improper access control in Nextcloud Social app version 0.3.1 allowed to read posts of any user.
|
CWE-863
Incorrect Authorization
|
CVE-2020-8278
|
2024-11-21 14:38 |
2020-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197639
|
7.5 |
HIGH
Network
|
nodejs fedoraproject oracle c-ares_project
|
node.js fedora graalvm retail_xstore_point_of_service jd_edwards_enterpriseone_tools mysql_cluster blockchain_platform c-ares
|
A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions < 15.2.1, < 14.15.1, and < 12.19.1 by getting the appli…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2020-8277
|
2024-11-21 14:38 |
2020-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197640
|
8.8 |
HIGH
Network
|
citrix
|
sd-wan
|
Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8.
|
CWE-78
OS Command
|
CVE-2020-8273
|
2024-11-21 14:38 |
2020-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|