|
198721
|
7.1 |
HIGH
Network
|
oracle
|
financial_services_analytical_applications_infrastructure
|
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Object Migration). Supported versions that are affe…
|
NVD-CWE-noinfo
|
CVE-2020-2688
|
2024-11-21 14:26 |
2020-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198722
|
4.3 |
MEDIUM
Network
|
oracle
|
peoplesoft_enterprise_peopletools
|
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerabili…
|
NVD-CWE-noinfo
|
CVE-2020-2687
|
2024-11-21 14:26 |
2020-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198723
|
9.8 |
CRITICAL
Network
|
qnap
|
qts quts_hero
|
A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. We have …
|
CWE-77
Command Injection
|
CVE-2020-2509
|
2024-11-21 14:25 |
2021-04-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198724
|
6.1 |
MEDIUM
Network
|
qnap
|
photo_station
|
This cross-site scripting vulnerability in Photo Station allows remote attackers to inject malicious code. QANP We have already fixed this vulnerability in the following versions of Photo Station. Ph…
|
CWE-79
Cross-site Scripting
|
CVE-2020-2502
|
2024-11-21 14:25 |
2021-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198725
|
9.8 |
CRITICAL
Network
|
qnap
|
surveillance_station
|
A stack-based buffer overflow vulnerability has been reported to affect QNAP NAS devices running Surveillance Station. If exploited, this vulnerability allows attackers to execute arbitrary code. QNA…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-2501
|
2024-11-21 14:25 |
2021-02-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198726
|
9.8 |
CRITICAL
Network
|
qnap
|
helpdesk
|
The vulnerability have been reported to affect earlier versions of QTS. If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. This issue affects: …
|
CWE-78
OS Command
|
CVE-2020-2507
|
2024-11-21 14:25 |
2021-02-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198727
|
9.8 |
CRITICAL
Network
|
qnap
|
helpdesk
|
The vulnerability have been reported to affect earlier versions of QTS. If exploited, this improper access control vulnerability could allow attackers to compromise the security of the software by ga…
|
NVD-CWE-Other
|
CVE-2020-2506
|
2024-11-21 14:25 |
2021-02-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198728
|
7.2 |
HIGH
Network
|
qnap
|
qts quts_hero
|
A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP hav…
|
CWE-77
Command Injection
|
CVE-2020-2508
|
2024-11-21 14:25 |
2021-01-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198729
|
2.3 |
LOW
Local
|
qnap
|
qes
|
If exploited, this vulnerability could allow attackers to gain sensitive information via generation of error messages. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.
|
CWE-209
Information Exposure Through an Error Message
|
CVE-2020-2505
|
2024-11-21 14:25 |
2020-12-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198730
|
7.5 |
HIGH
Network
|
qnap
|
qes
|
If exploited, this absolute path traversal vulnerability could allow attackers to traverse files in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.
|
CWE-22
Path Traversal
|
CVE-2020-2504
|
2024-11-21 14:25 |
2020-12-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|