|
210381
|
6.1 |
MEDIUM
Physics
|
telegram
|
telegram
|
The Telegram application through 5.12 for Android, when Show Popup is enabled, might allow physically proximate attackers to bypass intended restrictions on message reading and message replying. This…
|
NVD-CWE-noinfo
|
CVE-2020-10570
|
2024-11-21 13:55 |
2020-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210382
|
7.5 |
HIGH
Network
|
mikrotik
|
routeros
|
The SSH daemon on MikroTik routers through v6.44.3 could allow remote attackers to generate CPU activity, trigger refusal of new authorized connections, and cause a reboot via connect and write syste…
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2020-10364
|
2024-11-21 13:55 |
2020-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210383
|
9.1 |
CRITICAL
Network
|
hashicorp
|
vault
|
HashiCorp Vault and Vault Enterprise versions 0.11.0 through 1.3.3 may, under certain circumstances, have existing nested-path policies grant access to Namespaces created after-the-fact. Fixed in 1.3…
|
NVD-CWE-noinfo
|
CVE-2020-10661
|
2024-11-21 13:55 |
2020-03-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210384
|
5.3 |
MEDIUM
Network
|
hashicorp
|
vault
|
HashiCorp Vault and Vault Enterprise versions 0.9.0 through 1.3.3 may, under certain circumstances, have an Entity's Group membership inadvertently include Groups the Entity no longer has permissions…
|
CWE-276
Incorrect Default Permissions
|
CVE-2020-10660
|
2024-11-21 13:55 |
2020-03-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210385
|
7.5 |
HIGH
Network
|
torproject opensuse
|
tor leap backports_sle
|
Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (memory leak), aka TROVE-2020-004. This occurs in circpad_setup_machine_on_c…
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2020-10593
|
2024-11-21 13:55 |
2020-03-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210386
|
7.5 |
HIGH
Network
|
torproject opensuse
|
tor leap backports
|
Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (CPU consumption), aka TROVE-2020-002.
|
NVD-CWE-noinfo
|
CVE-2020-10592
|
2024-11-21 13:55 |
2020-03-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210387
|
6.5 |
MEDIUM
Network
|
tesla
|
model_3_web_interface
|
The driving interface of Tesla Model 3 vehicles in any release before 2020.4.10 allows Denial of Service to occur due to improper process separation, which allows attackers to disable the speedometer…
|
NVD-CWE-noinfo
|
CVE-2020-10558
|
2024-11-21 13:55 |
2020-03-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210388
|
7.1 |
HIGH
Local
|
deltaww
|
delta_industrial_automation_dopsoft
|
Delta Industrial Automation DOPSoft, Version 4.00.08.15 and prior. Multiple out-of-bounds read vulnerabilities may be exploited by processing specially crafted project files, which may allow an attac…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-10597
|
2024-11-21 13:55 |
2020-03-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210389
|
7.8 |
HIGH
Local
|
cmsmadesimple
|
cms_made_simple
|
The Filemanager in CMS Made Simple 2.2.13 allows remote code execution via a .php.jpegd JPEG file, as demonstrated by m1_files[] to admin/moduleinterface.php. The file should be sent as application/o…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-10682
|
2024-11-21 13:55 |
2020-03-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210390
|
5.4 |
MEDIUM
Network
|
cmsmadesimple
|
cms_made_simple
|
The Filemanager in CMS Made Simple 2.2.13 has stored XSS via a .pxd file, as demonstrated by m1_files[] to admin/moduleinterface.php.
|
CWE-79
Cross-site Scripting
|
CVE-2020-10681
|
2024-11-21 13:55 |
2020-03-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|