|
222291
|
7.5 |
HIGH
Network
|
python opensuse debian fedoraproject canonical netapp oracle
|
python leap debian_linux fedora ubuntu_linux active_iq_unified_manager cloud_volumes_ontap_mediator zfs_storage_appliance_kit
|
In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2019-20907
|
2024-11-21 13:39 |
2020-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222292
|
6.1 |
MEDIUM
Network
|
atlassian
|
jira jira_server
|
The login.jsp resource in Jira before version 8.5.2, and from version 8.6.0 before version 8.6.1 allows remote attackers to redirect users to a different website which they may use as part of perform…
|
CWE-601
Open Redirect
|
CVE-2019-20901
|
2024-11-21 13:39 |
2020-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222293
|
4.8 |
MEDIUM
Network
|
atlassian
|
jira_server jira_data_center
|
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the Add Field module. The af…
|
CWE-79
Cross-site Scripting
|
CVE-2019-20900
|
2024-11-21 13:39 |
2020-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222294
|
5.3 |
MEDIUM
Network
|
atlassian
|
jira jira_software_data_center jira_server jira_data_center
|
The Gadget API in Atlassian Jira Server and Data Center in affected versions allows remote attackers to make Jira unresponsive via repeated requests to a certain endpoint in the Gadget API. The affec…
|
NVD-CWE-noinfo
|
CVE-2019-20899
|
2024-11-21 13:39 |
2020-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222295
|
7.5 |
HIGH
Network
|
atlassian
|
jira_software_data_center jira
|
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to access sensitive information without being authenticated in the Global permissions screen. The affected versions a…
|
NVD-CWE-noinfo
|
CVE-2019-20898
|
2024-11-21 13:39 |
2020-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222296
|
6.5 |
MEDIUM
Network
|
atlassian
|
jira jira_software_data_center jira_server jira_data_center
|
The avatar upload feature in affected versions of Atlassian Jira Server and Data Center allows remote attackers to achieve Denial of Service via a crafted PNG file. The affected versions are before v…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2019-20897
|
2024-11-21 13:39 |
2020-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222297
|
9.8 |
CRITICAL
Network
|
webchess_project
|
webchess
|
WebChess 1.0 allows SQL injection via the messageFrom, gameID, opponent, messageID, or to parameter.
|
CWE-89
SQL Injection
|
CVE-2019-20896
|
2024-11-21 13:39 |
2020-07-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222298
|
7.5 |
HIGH
Network
|
traefik
|
traefik
|
Traefik 2.x, in certain configurations, allows HTTPS sessions to proceed without mutual TLS verification in a situation where ERR_BAD_SSL_CLIENT_AUTH_CERT should have occurred.
|
CWE-295
Improper Certificate Validation
|
CVE-2019-20894
|
2024-11-21 13:39 |
2020-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222299
|
9.8 |
CRITICAL
Network
|
activision
|
call_of_duty_modern_warfare_2
|
An issue was discovered in Activision Infinity Ward Call of Duty Modern Warfare 2 through 2019-12-11. PartyHost_HandleJoinPartyRequest has a buffer overflow vulnerability and can be exploited by usin…
|
CWE-120
Classic Buffer Overflow
|
CVE-2019-20893
|
2024-11-21 13:39 |
2020-06-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222300
|
6.5 |
MEDIUM
Network
|
net-snmp oracle
|
net-snmp zfs_storage_appliance_kit
|
net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-snmp packages shipped to end users by multiple Li…
|
CWE-415
Double Free
|
CVE-2019-20892
|
2024-11-21 13:39 |
2020-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|