|
197301
|
3.3 |
LOW
Local
|
sap
|
enable_now
|
SAP Enable Now, before version 1908, does not invalidate session tokens in a timely manner. The Insufficient Session Expiration may allow attackers with local access, for instance, to still download …
|
CWE-613
Insufficient Session Expiration
|
CVE-2020-6197
|
2024-11-21 14:35 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197302
|
7.5 |
HIGH
Network
|
sap
|
businessobjects_mobile
|
SAP BusinessObjects Mobile (MobileBIService), version 4.2, allows an attacker to generate multiple requests, using which he can block all the threads resulting in a Denial of Service.
|
NVD-CWE-noinfo
|
CVE-2020-6196
|
2024-11-21 14:35 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197303
|
5.4 |
MEDIUM
Network
|
sap
|
enable_now
|
SAP Enable Now, before version 1911, sends the Session ID cookie value in URL. This might be stolen from the browser history or log files, leading to Information Disclosure.
|
CWE-200
Information Exposure
|
CVE-2020-6178
|
2024-11-21 14:35 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197304
|
8.8 |
HIGH
Network
|
google fedoraproject redhat debian
|
chrome fedora enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation debian_linux
|
Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
|
CWE-843
Type Confusion
|
CVE-2020-6418
|
2024-11-21 14:35 |
2020-02-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197305
|
8.8 |
HIGH
Network
|
google
|
chrome
|
Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-6407
|
2024-11-21 14:35 |
2020-02-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197306
|
8.8 |
HIGH
Network
|
google fedoraproject redhat debian
|
chrome fedora enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation debian_linux
|
Use after free in speech in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
|
CWE-416
Use After Free
|
CVE-2020-6386
|
2024-11-21 14:35 |
2020-02-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197307
|
8.8 |
HIGH
Network
|
google fedoraproject redhat debian
|
chrome fedora enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation debian_linux
|
Use after free in WebAudio in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
|
CWE-416
Use After Free
|
CVE-2020-6384
|
2024-11-21 14:35 |
2020-02-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197308
|
8.8 |
HIGH
Network
|
google fedoraproject redhat debian
|
chrome fedora enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation debian_linux
|
Type confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
|
CWE-843
Type Confusion
|
CVE-2020-6383
|
2024-11-21 14:35 |
2020-02-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197309
|
7.5 |
HIGH
Network
|
coturn_project debian fedoraproject canonical
|
coturn debian_linux fedora ubuntu_linux
|
An exploitable denial-of-service vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST request can lead to server crash and denial of service. …
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-6062
|
2024-11-21 14:35 |
2020-02-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197310
|
9.8 |
CRITICAL
Network
|
coturn_project fedoraproject debian canonical
|
coturn fedora debian_linux ubuntu_linux
|
An exploitable heap out-of-bounds read vulnerability exists in the way CoTURN 4.5.1.1 web server parses POST requests. A specially crafted HTTP POST request can lead to information leaks and other mi…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-6061
|
2024-11-21 14:35 |
2020-02-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|