|
210141
|
7.8 |
HIGH
Local
|
amd
|
radeon_software
|
Arbitrary Decrement Privilege Escalation in AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service.
|
NVD-CWE-noinfo
|
CVE-2020-12902
|
2024-11-21 14:00 |
2021-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210142
|
7.8 |
HIGH
Local
|
amd
|
radeon_software
|
An arbitrary write vulnerability in the AMD Radeon Graphics Driver for Windows 10 potentially allows unprivileged users to gain Escalation of Privileges and cause Denial of Service.
|
NVD-CWE-noinfo
|
CVE-2020-12900
|
2024-11-21 14:00 |
2021-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210143
|
7.1 |
HIGH
Local
|
amd
|
radeon_software
|
Arbitrary Read in AMD Graphics Driver for Windows 10 may lead to KASLR bypass or denial of service.
|
NVD-CWE-noinfo
|
CVE-2020-12899
|
2024-11-21 14:00 |
2021-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210144
|
5.5 |
MEDIUM
Local
|
amd
|
radeon_software
|
Kernel Pool Address disclosure in AMD Graphics Driver for Windows 10 may lead to KASLR bypass.
|
NVD-CWE-noinfo
|
CVE-2020-12897
|
2024-11-21 14:00 |
2021-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210145
|
7.8 |
HIGH
Local
|
amd
|
radeon_software
|
Pool/Heap Overflow in AMD Graphics Driver for Windows 10 in Escape 0x110037 may lead to escalation of privilege, information disclosure or denial of service.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-12895
|
2024-11-21 14:00 |
2021-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210146
|
7.8 |
HIGH
Local
|
amd
|
radeon_software
|
A potential privilege escalation/denial of service issue exists in the AMD Radeon Kernel Mode driver Escape 0x2000c00 Call handler. An attacker with low privilege could potentially induce a Windows B…
|
NVD-CWE-noinfo
|
CVE-2020-12964
|
2024-11-21 14:00 |
2021-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210147
|
5.4 |
MEDIUM
Network
|
fortinet
|
fortianalyzer
|
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiAnalyzer version 6.0.6 and below, version 6.4.4 allows attacker to execute unauthorized code or…
|
CWE-79
Cross-site Scripting
|
CVE-2020-12814
|
2024-11-21 14:00 |
2021-11-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210148
|
7.5 |
HIGH
Network
|
3xlogic
|
infinias_eidc32_firmware
|
Missing TLS certificate validation on 3xLogic Infinias eIDC32 devices through 3.4.125 allows an attacker to intercept/control the channel by which door lock policies are applied.
|
CWE-295
Improper Certificate Validation
|
CVE-2020-12681
|
2024-11-21 14:00 |
2021-07-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210149
|
8.1 |
HIGH
Adjacent
|
depstech
|
wifi_digital_microscope_3_firmware
|
DEPSTECH WiFi Digital Microscope 3 allows remote attackers to change the SSID and password, and demand a ransom payment from the rightful device owner, because there is no way to reset to Factory Def…
|
CWE-862
Missing Authorization
|
CVE-2020-12734
|
2024-11-21 14:00 |
2021-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210150
|
7.5 |
HIGH
Network
|
depstech
|
wifi_digital_microscope_3_firmware
|
Certain Shenzhen PENGLIXIN components on DEPSTECH WiFi Digital Microscope 3, as used by Shekar Endoscope, allow a TELNET connection with the molinkadmin password for the molink account.
|
CWE-863
Incorrect Authorization
|
CVE-2020-12733
|
2024-11-21 14:00 |
2021-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|