|
196511
|
4.3 |
MEDIUM
Network
|
google debian fedoraproject opensuse
|
chrome debian_linux fedora leap backports
|
Insufficient policy enforcement in full screen in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted HTML page.
|
CWE-276
Incorrect Default Permissions
|
CVE-2020-6431
|
2024-11-21 14:35 |
2020-04-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196512
|
8.8 |
HIGH
Network
|
google fedoraproject debian opensuse
|
chrome fedora debian_linux leap backports_sle
|
Type Confusion in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
|
CWE-843
Type Confusion
|
CVE-2020-6430
|
2024-11-21 14:35 |
2020-04-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196513
|
8.8 |
HIGH
Network
|
google fedoraproject opensuse debian
|
chrome fedora leap backports_sle debian_linux
|
Use after free in audio in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
|
CWE-416
Use After Free
|
CVE-2020-6423
|
2024-11-21 14:35 |
2020-04-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196514
|
8.8 |
HIGH
Network
|
sap
|
netweaver_knowledge_management_and_collaboration_\(kmc-wpc\) netweaver_knowledge_management_and_collaboration_\(kmc-cm\)
|
SAP NetWeaver (Knowledge Management), versions (KMC-CM - 7.00, 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 and KMC-WPC 7.30, 7.31, 7.40, 7.50), does not sufficiently validate path information provided by user…
|
CWE-22
Path Traversal
|
CVE-2020-6225
|
2024-11-21 14:35 |
2020-04-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196515
|
6.1 |
MEDIUM
Network
|
communilink
|
clink_office
|
A cross-site scripting (XSS) vulnerability in the index page of the CLink Office 2.0 management console allows remote attackers to inject arbitrary web script or HTML via the lang parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2020-6171
|
2024-11-21 14:35 |
2020-04-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196516
|
8.1 |
HIGH
Network
|
gnu fedoraproject debian
|
glibc fedora debian_linux
|
An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc 2.30.9000. Calling memcpy() (on ARMv7 targets that utilize the GNU glibc implementation) with a…
|
-
|
CVE-2020-6096
|
2024-11-21 14:35 |
2020-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196517
|
7.5 |
HIGH
Network
|
gstreamer_project opensuse
|
gst-rtsp-server leap backports_sle
|
An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5. A specially crafted RTSP setup request can cause a null pointer deference r…
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-6095
|
2024-11-21 14:35 |
2020-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196518
|
7.5 |
HIGH
Network
|
videolabs debian
|
libmicrodns debian_linux
|
An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS messages, some allocated data is …
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2020-6080
|
2024-11-21 14:35 |
2020-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196519
|
7.5 |
HIGH
Network
|
videolabs debian
|
libmicrodns debian_linux
|
An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS messages, some allocated data is …
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2020-6079
|
2024-11-21 14:35 |
2020-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196520
|
7.5 |
HIGH
Network
|
videolabs debian
|
libmicrodns debian_linux
|
An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing mDNS messages in mdns_recv, the return value of the mdns_read_h…
|
CWE-252
Unchecked Return Value
|
CVE-2020-6078
|
2024-11-21 14:35 |
2020-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|