|
202591
|
9.8 |
CRITICAL
Network
|
tp-link
|
tl-wr849n_firmware
|
On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's tracerou…
|
CWE-78
OS Command
|
CVE-2020-9374
|
2024-11-21 14:40 |
2020-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
202592
|
7.5 |
HIGH
Network
|
sympa
fedoraproject
debian
|
sympa
fedora
debian_linux
|
Sympa 6.2.38 through 6.2.52 allows remote attackers to cause a denial of service (disk consumption from temporary files, and a flood of notifications to listmasters) via a series of requests with mal…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2020-9369
|
2024-11-21 14:40 |
2020-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
202593
|
9.8 |
CRITICAL
Network
|
gnu
|
screen
|
A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49. Specially crafted output, or a special program, could corrupt memory and crash Screen or possibly hav…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-9366
|
2024-11-21 14:40 |
2020-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
202594
|
7.5 |
HIGH
Network
|
pureftpd
fedoraproject
|
pure-ftpd
fedora
|
An issue was discovered in Pure-FTPd 1.0.49. An out-of-bounds (OOB) read has been detected in the pure_strcmp function in utils.c.
|
CWE-125
Out-of-bounds Read
|
CVE-2020-9365
|
2024-11-21 14:40 |
2020-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
202595
|
7.8 |
HIGH
Local
|
sophos
|
cloud_optix
mobile
intercept_x_endpoint
intercept_x_for_server
secure_web_gateway
endpoint_protection
|
The Sophos AV parsing engine before 2020-01-14 allows virus-detection bypass via a crafted ZIP archive. This affects Endpoint Protection, Cloud Optix, Mobile, Intercept X Endpoint, Intercept X for Se…
|
CWE-436
Interpretation Conflict
|
CVE-2020-9363
|
2024-11-21 14:40 |
2020-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
202596
|
7.8 |
HIGH
Local
|
quickheal
|
home_security
internet_security
total_security_multi-device
antivirus_pro
antivirus_for_server
total_security
|
The Quick Heal AV parsing engine (November 2019) allows virus-detection bypass via a crafted GPFLAG in a ZIP archive. This affects Total Security, Home Security, Total Security Multi-Device, Internet…
|
CWE-436
Interpretation Conflict
|
CVE-2020-9362
|
2024-11-21 14:40 |
2020-02-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
202597
|
9.8 |
CRITICAL
Network
|
networkmanager-ssh_project
debian
|
networkmanager-ssh
debian_linux
|
danfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options are mishandled.
|
NVD-CWE-noinfo
|
CVE-2020-9355
|
2024-11-21 14:40 |
2020-02-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
202598
|
7.5 |
HIGH
Network
|
smartclient
|
smartclient
|
An issue was discovered in SmartClient 12.0. The Remote Procedure Call (RPC) saveFile provided by the console functionality on the /tools/developerConsoleOperations.jsp (or /isomorphic/IDACall) URL a…
|
CWE-22
Path Traversal
|
CVE-2020-9354
|
2024-11-21 14:40 |
2020-02-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
202599
|
7.5 |
HIGH
Network
|
smartclient
|
smartclient
|
An issue was discovered in SmartClient 12.0. The Remote Procedure Call (RPC) loadFile provided by the console functionality on the /tools/developerConsoleOperations.jsp (or /isomorphic/IDACall) URL i…
|
CWE-22
Path Traversal
|
CVE-2020-9353
|
2024-11-21 14:40 |
2020-02-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
202600
|
9.8 |
CRITICAL
Network
|
smartclient
|
smartclient
|
An issue was discovered in SmartClient 12.0. Unauthenticated exploitation of blind XXE can occur in the downloadWSDL feature by sending a POST request to /tools/developerConsoleOperations.jsp with a …
|
CWE-611
XXE
|
CVE-2020-9352
|
2024-11-21 14:40 |
2020-02-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
