|
210941
|
9.8 |
CRITICAL
Network
|
tecrail
|
responsive_filemanager
|
upload.php in Responsive FileManager 9.13.4 and 9.14.0 allows SSRF via the url parameter because file-extension blocking is mishandled and because it is possible for a DNS hostname to resolve to an i…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2020-10212
|
2024-11-21 13:54 |
2020-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210942
|
5.4 |
MEDIUM
Network
|
citrix
|
gateway_firmware
|
Citrix Gateway 11.1, 12.0, and 12.1 allows Cache Poisoning. NOTE: Citrix disputes this as not a vulnerability. By default, Citrix ADC only caches static content served under certain URL paths for Cit…
|
CWE-444
HTTP Request Smuggling
|
CVE-2020-10112
|
2024-11-21 13:54 |
2020-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210943
|
7.5 |
HIGH
Network
|
citrix
|
gateway_firmware
|
Citrix Gateway 11.1, 12.0, and 12.1 has an Inconsistent Interpretation of HTTP Requests. NOTE: Citrix disputes the reported behavior as not a security issue. Citrix ADC only caches HTTP/1.1 traffic f…
|
CWE-444
HTTP Request Smuggling
|
CVE-2020-10111
|
2024-11-21 13:54 |
2020-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210944
|
5.3 |
MEDIUM
Network
|
citrix
|
gateway_firmware
|
Citrix Gateway 11.1, 12.0, and 12.1 allows Information Exposure Through Caching. NOTE: Citrix disputes this as not a vulnerability. There is no sensitive information disclosure through the cache head…
|
NVD-CWE-noinfo
|
CVE-2020-10110
|
2024-11-21 13:54 |
2020-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210945
|
7.5 |
HIGH
Network
|
eset
|
smart_security nod32_antivirus mobile_security smart_tv_security internet_security cyber_security
|
ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive. This affects versions before 1294 of Smart Security Premium, Internet Secu…
|
CWE-436
Interpretation Conflict
|
CVE-2020-10193
|
2024-11-21 13:54 |
2020-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210946
|
9.8 |
CRITICAL
Network
|
zohocorp
|
manageengine_desktop_central
|
Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted data in getChartImage in the FileStorage class. This is related to the CewolfSer…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2020-10189
|
2024-11-21 13:54 |
2020-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210947
|
9.8 |
CRITICAL
Network
|
netkit_telnet_project fedoraproject debian arista oracle juniper
|
netkit_telnet fedora debian_linux eos communications_performance_intelligence_center junos
|
utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem …
|
CWE-120
Classic Buffer Overflow
|
CVE-2020-10188
|
2024-11-21 13:54 |
2020-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210948
|
8.6 |
HIGH
Network
|
yubico
|
yubikey_one_time_password_validation_server
|
The sync endpoint in YubiKey Validation Server before 2.40 allows remote attackers to replay an OTP. NOTE: this issue is potentially relevant to persons outside Yubico who operate a self-hosted OTP v…
|
CWE-294
Authentication Bypass by Capture-replay
|
CVE-2020-10185
|
2024-11-21 13:54 |
2020-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210949
|
7.5 |
HIGH
Network
|
yubico
|
yubikey_one_time_password_validation_server
|
The verify endpoint in YubiKey Validation Server before 2.40 does not check the length of SQL queries, which allows remote attackers to cause a denial of service, aka SQL injection. NOTE: this issue …
|
CWE-89
SQL Injection
|
CVE-2020-10184
|
2024-11-21 13:54 |
2020-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210950
|
9.8 |
CRITICAL
Network
|
eset
|
nod32_antivirus smart_security mobile_security smart_tv_security cyber_security
|
The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antiviru…
|
CWE-436
Interpretation Conflict
|
CVE-2020-10180
|
2024-11-21 13:54 |
2020-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|