|
196531
|
8.8 |
HIGH
Network
|
google debian fedoraproject suse opensuse
|
chrome debian_linux fedora suse_linux_enterprise_server backports_sle suse_linux_enterprise_desktop
|
Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
|
CWE-416
Use After Free
|
CVE-2020-6424
|
2024-11-21 14:35 |
2020-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196532
|
8.8 |
HIGH
Network
|
google fedoraproject debian suse opensuse
|
chrome fedora debian_linux suse_linux_enterprise_server backports_sle suse_linux_enterprise_desktop
|
Use after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-6422
|
2024-11-21 14:35 |
2020-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196533
|
8.8 |
HIGH
Network
|
google debian fedoraproject
|
chrome debian_linux fedora
|
Insufficient policy enforcement in media in Google Chrome prior to 80.0.3987.132 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
|
NVD-CWE-noinfo
|
CVE-2020-6420
|
2024-11-21 14:35 |
2020-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196534
|
5.9 |
MEDIUM
Network
|
citrix
|
citrix_sd-wan_center netscaler_sd-wan_center
|
Citrix SD-WAN 10.2.x before 10.2.6 and 11.0.x before 11.0.3 has Missing SSL Certificate Validation.
|
CWE-295
Improper Certificate Validation
|
CVE-2020-6175
|
2024-11-21 14:35 |
2020-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196535
|
6.1 |
MEDIUM
Network
|
sap
|
fiori_launchpad
|
SAP Fiori Launchpad, versions- 753, 754, does not sufficiently encode user-controlled inputs, and hence allowing the attacker to inject the meta tag into the launchpad html using the vulnerable param…
|
CWE-79
Cross-site Scripting
|
CVE-2020-6210
|
2024-11-21 14:35 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196536
|
7.5 |
HIGH
Network
|
sap
|
disclosure_management
|
SAP Disclosure Management, version 10.1, does not perform necessary authorization checks for an authenticated user, allowing access to administration accounts by a user with no roles, leading to Miss…
|
CWE-862
Missing Authorization
|
CVE-2020-6209
|
2024-11-21 14:35 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196537
|
8.2 |
HIGH
Local
|
sap
|
crystal_reports
|
SAP Business Objects Business Intelligence Platform (Crystal Reports), versions- 4.1, 4.2, allows an attacker with basic authorization to inject code that can be executed by the application and thus …
|
CWE-416
Use After Free
|
CVE-2020-6208
|
2024-11-21 14:35 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196538
|
9.8 |
CRITICAL
Network
|
sap
|
solution_manager
|
SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform any authentication for a service resulting in complete compromise of all SMDAgent…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2020-6207
|
2024-11-21 14:35 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196539
|
4.3 |
MEDIUM
Network
|
sap
|
cloud_platform_integration
|
SAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected as error or warning massages. This could mislead the victim to follow malicious instructions inserted…
|
CWE-352
Origin Validation Error
|
CVE-2020-6206
|
2024-11-21 14:35 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196540
|
4.3 |
MEDIUM
Network
|
sap
|
treasury_and_risk_management_\(ea-finserv\) treasury_and_risk_management_\(s4core\)
|
The selection query in SAP Treasury and Risk Management (Transaction Management) (EA-FINSERV?versions 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104) returns more …
|
CWE-862
Missing Authorization
|
CVE-2020-6204
|
2024-11-21 14:35 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|