|
209821
|
5.3 |
MEDIUM
Network
|
avertx
|
hd838_firmware hd438_firmware
|
An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438. Failed web UI login attempts elicit di…
|
CWE-203
Information Exposure Through Discrepancy
|
CVE-2020-11625
|
2024-11-21 13:58 |
2020-07-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209822
|
9.8 |
CRITICAL
Network
|
avertx
|
hd838_firmware hd438_firmware
|
An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438. They do not require users to change th…
|
CWE-521
Weak Password Requirements
|
CVE-2020-11624
|
2024-11-21 13:58 |
2020-07-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209823
|
6.8 |
MEDIUM
Physics
|
avertx
|
hd838_firmware hd438_firmware
|
An issue was discovered in AvertX Auto focus Night Vision HD Indoor/Outdoor IP Dome Camera HD838 and Night Vision HD Indoor/Outdoor Mini IP Bullet Camera HD438. An attacker with physical access to th…
|
NVD-CWE-noinfo
|
CVE-2020-11623
|
2024-11-21 13:58 |
2020-07-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209824
|
9.8 |
CRITICAL
Network
|
superwebmailer
|
superwebmailer
|
SuperWebMailer 7.21.0.01526 is susceptible to a remote code execution vulnerability in the Language parameter of mailingupgrade.php. An unauthenticated remote attacker can exploit this behavior to ex…
|
CWE-94
Code Injection
|
CVE-2020-11546
|
2024-11-21 13:58 |
2020-07-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209825
|
7.8 |
HIGH
Local
|
gog
|
galaxy
|
In GOG Galaxy 1.2.67, there is a service that is vulnerable to weak file/service permissions: GalaxyClientService.exe. An attacker can put malicious code in a Trojan horse GalaxyClientService.exe. Af…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2020-11827
|
2024-11-21 13:58 |
2020-07-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209826
|
9.8 |
CRITICAL
Network
|
rittal
|
cmciii-pu-9333e0fb_firmware pdu-3c002dec_firmware cmc_iii_pu_7030.000_firmware lcp-cw_firmware iot_interface_3124.300
|
An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. There is a least privilege violation.
|
CWE-269
Improper Privilege Management
|
CVE-2020-11956
|
2024-11-21 13:58 |
2020-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209827
|
8.8 |
HIGH
Network
|
rittal
|
cmciii-pu-9333e0fb_firmware pdu-3c002dec_firmware cmc_iii_pu_7030.000_firmware lcp-cw_firmware iot_interface_3124.300
|
An issue was discovered on Rittal PDU-3C002DEC through 5.15.70 and CMCIII-PU-9333E0FB through 3.15.70 devices. There are insecure permissions.
|
CWE-276
Incorrect Default Permissions
|
CVE-2020-11955
|
2024-11-21 13:58 |
2020-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209828
|
8.8 |
HIGH
Network
|
rittal
|
cmciii-pu-9333e0fb_firmware pdu-3c002dec_firmware cmc_iii_pu_7030.000_firmware lcp-cw_firmware iot_interface_3124.300
|
An issue was discovered on Rittal PDU-3C002DEC through 5.15.40 and CMCIII-PU-9333E0FB through 3.15.70_4 devices. Attackers can execute code.
|
CWE-78
OS Command
|
CVE-2020-11953
|
2024-11-21 13:58 |
2020-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209829
|
6.2 |
MEDIUM
Local
|
rittal
|
cmciii-pu-9333e0fb_firmware pdu-3c002dec_firmware cmc_iii_pu_7030.000_firmware lcp-cw_firmware iot_interface_3124.300
|
An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. Attackers can bypass the CLI menu.
|
NVD-CWE-noinfo
|
CVE-2020-11952
|
2024-11-21 13:58 |
2020-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209830
|
9.8 |
CRITICAL
Network
|
rittal
|
cmciii-pu-9333e0fb_firmware pdu-3c002dec_firmware cmc_iii_pu_7030.000_firmware lcp-cw_firmware iot_interface_3124.300
|
An issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3.17.10 devices. There is a Backdoor root account.
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2020-11951
|
2024-11-21 13:58 |
2020-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|