|
210321
|
7.5 |
HIGH
Network
|
json_project fedoraproject opensuse debian apple
|
json fedora leap debian_linux macos
|
The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar to CVE-2013-0269, …
|
CWE-20
Improper Input Validation
|
CVE-2020-10663
|
2024-11-21 13:55 |
2020-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210322
|
7.5 |
HIGH
Network
|
inductiveautomation
|
ignition_gateway
|
An unprotected logging route may allow an attacker to write endless log statements into the database without space limits or authentication. This results in consuming the entire available hard-disk s…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2020-10641
|
2024-11-21 13:55 |
2020-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210323
|
7.5 |
HIGH
Network
|
windriver
|
vxworks
|
The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference.
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-10664
|
2024-11-21 13:55 |
2020-04-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210324
|
8.2 |
HIGH
Network
|
redhat
|
openshift_container_platform
|
A flaw was found in OpenShift Container Platform version 4.1 and later. Sensitive information was found to be logged by the image registry operator allowing an attacker able to gain access to those l…
|
-
|
CVE-2020-10712
|
2024-11-21 13:55 |
2020-04-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210325
|
9.8 |
CRITICAL
Network
|
sysaid
|
on-premise
|
SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack. Additionally, it allows unauthenticated access to upload files, which can be used to exe…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-10569
|
2024-11-21 13:55 |
2020-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210326
|
9.8 |
CRITICAL
Network
|
mitel
|
mivoice_connect_client mivoice_connect
|
A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow an unauthenticated attacker to gain access to user credentials. A successful exploit could allow an a…
|
CWE-327
Use of a Broken or Risky Cryptographic Algorithm
|
CVE-2020-10377
|
2024-11-21 13:55 |
2020-04-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210327
|
7.5 |
HIGH
Network
|
trianglemicroworks
|
scada_data_gateway
|
Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers cause a denial-of-service condition due to a lack of proper validation of the lengt…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-10615
|
2024-11-21 13:55 |
2020-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210328
|
7.5 |
HIGH
Network
|
trianglemicroworks
|
scada_data_gateway
|
Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to disclose sensitive information due to the lack of proper validation of user-supp…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-10613
|
2024-11-21 13:55 |
2020-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210329
|
9.8 |
CRITICAL
Network
|
trianglemicroworks
|
scada_data_gateway
|
Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to execute arbitrary code due to the lack of proper validation of user-supplied dat…
|
CWE-843
Type Confusion
|
CVE-2020-10611
|
2024-11-21 13:55 |
2020-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210330
|
7.8 |
HIGH
Local
|
eaton
|
hmisoft_vu3_firmware
|
Eaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. A specially crafted input file could cause a buffer overflow …
|
CWE-120
Classic Buffer Overflow
|
CVE-2020-10639
|
2024-11-21 13:55 |
2020-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|