|
209181
|
5.4 |
MEDIUM
Network
|
hitachi
|
vantara_pentaho
|
The dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript c…
|
CWE-79
Cross-site Scripting
|
CVE-2020-24664
|
2024-11-21 14:15 |
2021-01-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209182
|
7.5 |
HIGH
Network
|
arubanetworks
|
airwave_glass
|
In Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through an unauthenticated endpoint that if successfully exploited can result in disclosure of sensitive info…
|
CWE-287 CWE-918
Improper Authentication Server-Side Request Forgery (SSRF)
|
CVE-2020-24641
|
2024-11-21 14:15 |
2021-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209183
|
9.8 |
CRITICAL
Network
|
arubanetworks
|
airwave_glass
|
There is a vulnerability caused by insufficient input validation that allows for arbitrary command execution in a containerized environment within Airwave Glass before 1.3.3. Successful exploitation …
|
NVD-CWE-noinfo
|
CVE-2020-24640
|
2024-11-21 14:15 |
2021-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209184
|
9.8 |
CRITICAL
Network
|
arubanetworks
|
airwave_glass
|
There is a vulnerability caused by unsafe Java deserialization that allows for arbitrary command execution in a containerized environment within Airwave Glass before 1.3.3. Successful exploitation ca…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2020-24639
|
2024-11-21 14:15 |
2021-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209185
|
7.2 |
HIGH
Network
|
arubanetworks
|
airwave_glass
|
Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli. These allow for a user with glassadmin privileges to execute arbitrary code as root…
|
NVD-CWE-noinfo
|
CVE-2020-24638
|
2024-11-21 14:15 |
2021-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209186
|
6.1 |
MEDIUM
Network
|
open-xchange
|
open-xchange_appsuite
|
OX App Suite through 7.10.4 allows XSS via the app loading mechanism (the PATH_INFO to the /appsuite URI).
|
CWE-79
Cross-site Scripting
|
CVE-2020-24701
|
2024-11-21 14:15 |
2021-01-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209187
|
5.4 |
MEDIUM
Network
|
open-xchange
|
open-xchange_appsuite
|
OX App Suite through 7.10.3 allows SSRF because GET requests are sent to arbitrary domain names with an initial autoconfig. substring.
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2020-24700
|
2024-11-21 14:15 |
2021-01-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209188
|
7.5 |
HIGH
Network
|
dlink
|
dsl-2888a_firmware
|
An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. The One Touch application discloses sensitive information, such as the hashed admin login password and …
|
CWE-312
Cleartext Storage of Sensitive Information
|
CVE-2020-24577
|
2024-11-21 14:15 |
2021-01-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209189
|
7.8 |
HIGH
Local
|
arm
|
arm_compiler
|
Arm Compiler 5 through 5.06u6 has an error in a stack protection feature designed to help spot stack-based buffer overflows in local arrays. When this feature is enabled, a protected function writes …
|
CWE-787 CWE-770
Out-of-bounds Write Allocation of Resources Without Limits or Throttling
|
CVE-2020-24658
|
2024-11-21 14:15 |
2020-12-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209190
|
9.8 |
CRITICAL
Network
|
abb
|
symphony_\+_historian symphony_\+_operations
|
The affected versions of S+ Operations (version 2.1 SP1 and earlier) used an approach for user authentication which relies on validation at the client node (client-side authentication). This is not a…
|
CWE-669
Incorrect Resource Transfer Between Spheres
|
CVE-2020-24683
|
2024-11-21 14:15 |
2020-12-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|