|
210491
|
7.5 |
HIGH
Network
|
linuxfoundation canonical
|
ceph ubuntu_linux
|
An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception.
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-12059
|
2024-11-21 13:59 |
2020-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210492
|
7.5 |
HIGH
Network
|
mediawiki
|
mediawiki
|
The CentralAuth extension through REL1_34 for MediaWiki allows remote attackers to obtain sensitive hidden account information via an api.php?action=query&meta=globaluserinfo&guiuser= request. In oth…
|
NVD-CWE-noinfo
|
CVE-2020-12051
|
2024-11-21 13:59 |
2020-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210493
|
7.5 |
HIGH
Network
|
evenroute
|
iqrouter_firmware
|
In the web-panel in IQrouter through 3.3.1, remote attackers can read system logs because of Incorrect Access Control. Note: The vendor claims that this vulnerability can only occur on a brand-new ne…
|
CWE-532
Inclusion of Sensitive Information in Log Files
|
CVE-2020-11968
|
2024-11-21 13:59 |
2020-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210494
|
9.8 |
CRITICAL
Network
|
evenroute
|
iqrouter_firmware
|
In IQrouter through 3.3.1, remote attackers can control the device (restart network, reboot, upgrade, reset) because of Incorrect Access Control. Note: The vendor claims that this vulnerability can o…
|
CWE-862
Missing Authorization
|
CVE-2020-11967
|
2024-11-21 13:59 |
2020-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210495
|
9.8 |
CRITICAL
Network
|
evenroute
|
iqrouter_firmware
|
In IQrouter through 3.3.1, the Lua function reset_password in the web-panel allows remote attackers to change the root password arbitrarily. Note: The vendor claims that this vulnerability can only o…
|
CWE-521
Weak Password Requirements
|
CVE-2020-11966
|
2024-11-21 13:59 |
2020-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210496
|
9.8 |
CRITICAL
Network
|
evenroute
|
iqrouter_firmware
|
In IQrouter through 3.3.1, there is a root user without a password, which allows attackers to gain full remote access via SSH. Note: The vendor claims that this vulnerability can only occur on a bran…
|
CWE-287
Improper Authentication
|
CVE-2020-11965
|
2024-11-21 13:59 |
2020-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210497
|
7.5 |
HIGH
Network
|
evenroute
|
iqrouter_firmware
|
In IQrouter through 3.3.1, the Lua function diag_set_password in the web-panel allows remote attackers to change the root password arbitrarily. Note: The vendor claims that this vulnerability can onl…
|
CWE-287
Improper Authentication
|
CVE-2020-11964
|
2024-11-21 13:59 |
2020-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210498
|
- |
|
-
|
-
|
AdvaBuild uses a command queue to launch certain operations. An attacker who gains access to the
command queue can use it to launch an attack by running any executable on the AdvaBuild node. The
exec…
|
-
|
CVE-2020-11640
|
2024-11-21 13:58 |
2024-07-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210499
|
- |
|
-
|
-
|
An attacker could exploit the vulnerability by
injecting garbage data or specially crafted data. Depending on the data injected each process might be
affected differently. The process could crash or …
|
-
|
CVE-2020-11639
|
2024-11-21 13:58 |
2024-07-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210500
|
6.5 |
MEDIUM
Network
|
netiq
|
access_manager
|
This allows the information exposure to unauthorized users. This issue affects NetIQ Access Manager using version 4.5 or before
|
NVD-CWE-noinfo
|
CVE-2020-11843
|
2024-11-21 13:58 |
2024-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|