|
196921
|
8.8 |
HIGH
Adjacent
|
eaton
|
ups_companion
|
UPS companion software v1.05 & Prior is affected by ‘Eval Injection’ vulnerability. The software does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluat…
|
CWE-94
Code Injection
|
CVE-2020-6650
|
2024-11-21 14:36 |
2020-03-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196922
|
8.4 |
HIGH
Network
|
systech
|
nds\/5008rm_firmware nds-5000_firmware
|
Systech Corporation NDS-5000 Terminal Server, NDS/5008 (8 Port, RJ45), firmware Version 02D.30. Successful exploitation of this vulnerability could allow information disclosure, limit system availabi…
|
CWE-79
Cross-site Scripting
|
CVE-2020-7006
|
2024-11-21 14:36 |
2020-03-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196923
|
4.8 |
MEDIUM
Network
|
mcafee
|
network_security_manager
|
Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2020-7258
|
2024-11-21 14:36 |
2020-03-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196924
|
4.8 |
MEDIUM
Network
|
mcafee
|
network_security_manager
|
Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2020-7256
|
2024-11-21 14:36 |
2020-03-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196925
|
5.5 |
MEDIUM
Local
|
deltaww
|
cncsoft_screeneditor
|
Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. An out-of-bounds read overflow can be exploited when a valid user opens a specially crafted, malicious input file due to the lack…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-6976
|
2024-11-21 14:36 |
2020-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196926
|
7.8 |
HIGH
Local
|
deltaww
|
cncsoft_screeneditor
|
Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. Multiple stack-based buffer overflows can be exploited when a valid user opens a specially crafted, malicious input file.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-7002
|
2024-11-21 14:36 |
2020-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196927
|
5.4 |
MEDIUM
Network
|
fortinet
|
fortiweb
|
An improper neutralization of input vulnerability in FortiWeb allows a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the Disclaimer Description of a Replacem…
|
CWE-79
Cross-site Scripting
|
CVE-2020-6646
|
2024-11-21 14:36 |
2020-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196928
|
7.5 |
HIGH
Network
|
openwrt
|
openwrt
|
libubox in OpenWrt before 18.06.7 and 19.x before 19.07.1 has a tagged binary data JSON serialization vulnerability that may cause a stack based buffer overflow.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-7248
|
2024-11-21 14:36 |
2020-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196929
|
7.5 |
HIGH
Network
|
nagios fedoraproject
|
remote_plug_in_executor fedora
|
Nagios NRPE 3.2.1 has a Heap-Based Buffer Overflow, as demonstrated by interpretation of a small negative number as a large positive number during a bzero call.
|
CWE-787 CWE-681
Out-of-bounds Write Incorrect Conversion between Numeric Types
|
CVE-2020-6582
|
2024-11-21 14:36 |
2020-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196930
|
7.3 |
HIGH
Local
|
nagios fedoraproject
|
remote_plug_in_executor fedora
|
Nagios NRPE 3.2.1 has Insufficient Filtering because, for example, nasty_metachars interprets \n as the character \ and the character n (not as the \n newline sequence). This can cause command inject…
|
NVD-CWE-noinfo
|
CVE-2020-6581
|
2024-11-21 14:36 |
2020-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|