|
197541
|
5.0 |
MEDIUM
Network
|
semtech
|
lora_basics_station
|
In LoRa Basics Station before 2.0.4, there is a Use After Free vulnerability that leads to memory corruption. This bug is triggered on 32-bit machines when the CUPS server responds with a message (ht…
|
-
|
CVE-2020-4060
|
2024-11-21 14:32 |
2020-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197542
|
3.3 |
LOW
Local
|
vmware
|
tools
|
VMware Tools for macOS (11.x.x and prior before 11.1.1) contains a denial-of-service vulnerability in the Host-Guest File System (HGFS) implementation. Successful exploitation of this issue may allow…
|
NVD-CWE-noinfo
|
CVE-2020-3972
|
2024-11-21 14:32 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197543
|
5.4 |
MEDIUM
Network
|
ibm
|
rational_doors_next_generation doors_next
|
IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alterin…
|
CWE-79
Cross-site Scripting
|
CVE-2020-4297
|
2024-11-21 14:32 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197544
|
5.4 |
MEDIUM
Network
|
ibm
|
rational_doors_next_generation doors_next
|
IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alterin…
|
CWE-79
Cross-site Scripting
|
CVE-2020-4295
|
2024-11-21 14:32 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197545
|
5.4 |
MEDIUM
Network
|
ibm
|
rational_doors_next_generation doors_next
|
IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alterin…
|
CWE-79
Cross-site Scripting
|
CVE-2020-4281
|
2024-11-21 14:32 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197546
|
7.3 |
HIGH
Network
|
mversion_project
|
mversion
|
In mversion before 2.0.0, there is a command injection vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. This vu…
|
-
|
CVE-2020-4059
|
2024-11-21 14:32 |
2020-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197547
|
5.3 |
MEDIUM
Network
|
ibm
|
business_automation_workflow business_process_manager
|
IBM Business Automation Workflow and IBM Business Process Manager (IBM Business Process Manager Express 8.5.5, 8.5.6, 8.5.7, and 8.6) could allow a remote attacker to obtain sensitive information whe…
|
CWE-209
Information Exposure Through an Error Message
|
CVE-2020-4532
|
2024-11-21 14:32 |
2020-06-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197548
|
7.3 |
HIGH
Network
|
sanitize_project
|
sanitize
|
In Sanitize (RubyGem sanitize) greater than or equal to 3.0.0 and less than 5.2.1, there is a cross-site scripting vulnerability. When HTML is sanitized using Sanitize's "relaxed" config, or a custom…
|
-
|
CVE-2020-4054
|
2024-11-21 14:32 |
2020-06-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197549
|
6.8 |
MEDIUM
Network
|
helm
|
helm
|
In Helm greater than or equal to 3.0.0 and less than 3.2.4, a path traversal attack is possible when installing Helm plugins from a tar archive over HTTP. It is possible for a malicious plugin author…
|
-
|
CVE-2020-4053
|
2024-11-21 14:32 |
2020-06-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197550
|
6.1 |
MEDIUM
Network
|
requarks
|
wiki.js
|
In Wiki.js before 2.4.107, there is a stored cross-site scripting through template injection. This vulnerability exists due to an insecure validation mechanism intended to insert v-pre tags into rend…
|
-
|
CVE-2020-4052
|
2024-11-21 14:32 |
2020-06-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|