|
210181
|
8.8 |
HIGH
Network
|
marvell
|
qconvergeconsole
|
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is required to exploit this vulnerability,…
|
-
|
CVE-2020-17388
|
2024-11-21 14:07 |
2020-08-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210182
|
8.8 |
HIGH
Network
|
marvell
|
qconvergeconsole
|
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is required to exploit this vulnerability,…
|
-
|
CVE-2020-17387
|
2024-11-21 14:07 |
2020-08-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210183
|
6.5 |
MEDIUM
Network
|
cellopoint
|
cellos
|
Cellopoint Cellos v4.1.10 Build 20190922 does not validate URL inputted properly. With cookie of an authenticated user, attackers can temper with the URL parameter and access arbitrary file on system.
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2020-17386
|
2024-11-21 14:07 |
2020-08-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210184
|
7.5 |
HIGH
Network
|
cellopoint
|
cellos
|
Cellopoint Cellos v4.1.10 Build 20190922 does not validate URL inputted properly, which allows unauthorized user to launch Path Traversal attack and access arbitrate file on the system.
|
CWE-22
Path Traversal
|
CVE-2020-17385
|
2024-11-21 14:07 |
2020-08-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210185
|
7.2 |
HIGH
Network
|
cellopoint
|
cellos
|
Cellopoint Cellos v4.1.10 Build 20190922 does not validate URL inputted properly. With the cookie of the system administrator, attackers can inject and remotely execute arbitrary command to manipulat…
|
CWE-78
OS Command
|
CVE-2020-17384
|
2024-11-21 14:07 |
2020-08-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210186
|
2.1 |
LOW
Physics
|
philips
|
suresigns_vs4_firmware
|
Philips SureSigns VS4, A.07.107 and prior. The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
|
CWE-863
Incorrect Authorization
|
CVE-2020-16241
|
2024-11-21 14:07 |
2020-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210187
|
4.9 |
MEDIUM
Network
|
philips
|
suresigns_vs4_firmware
|
Philips SureSigns VS4, A.07.107 and prior. When an actor claims to have a given identity, the software does not prove or insufficiently proves the claim is correct.
|
CWE-287
Improper Authentication
|
CVE-2020-16239
|
2024-11-21 14:07 |
2020-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210188
|
2.1 |
LOW
Physics
|
philips
|
suresigns_vs4_firmware
|
Philips SureSigns VS4, A.07.107 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely …
|
CWE-20
Improper Input Validation
|
CVE-2020-16237
|
2024-11-21 14:07 |
2020-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210189
|
8.8 |
HIGH
Local
|
rangee
|
rangeeos
|
In the default configuration of Rangee GmbH RangeeOS 8.0.4, all components are executed in the context of the privileged root user. This may allow a local attacker to break out of the restricted envi…
|
CWE-78
OS Command
|
CVE-2020-16282
|
2024-11-21 14:07 |
2020-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210190
|
7.8 |
HIGH
Local
|
rangee
|
rangeeos
|
The Kommbox component in Rangee GmbH RangeeOS 8.0.4 could allow a local authenticated attacker to escape from the restricted environment and execute arbitrary code due to unrestricted context menus b…
|
CWE-116
Improper Encoding or Escaping of Output
|
CVE-2020-16281
|
2024-11-21 14:07 |
2020-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|