|
210231
|
9.8 |
CRITICAL
Network
|
pandorafms
|
pandora_fms
|
Artica Pandora FMS 7.44 allows privilege escalation.
|
CWE-269
Improper Privilege Management
|
CVE-2020-13854
|
2024-11-21 14:02 |
2020-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210232
|
5.4 |
MEDIUM
Network
|
pandorafms
|
pandora_fms
|
Artica Pandora FMS 7.44 has persistent XSS in the Messages feature.
|
CWE-79
Cross-site Scripting
|
CVE-2020-13853
|
2024-11-21 14:02 |
2020-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210233
|
7.2 |
HIGH
Network
|
pandorafms
|
pandora_fms
|
Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Manager feature.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-13852
|
2024-11-21 14:02 |
2020-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210234
|
8.8 |
HIGH
Network
|
pandorafms
|
pandora_fms
|
Artica Pandora FMS 7.44 allows remote command execution via the events feature.
|
CWE-78
OS Command
|
CVE-2020-13851
|
2024-11-21 14:02 |
2020-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210235
|
7.5 |
HIGH
Network
|
pandorafms
|
pandora_fms
|
Artica Pandora FMS 7.44 has inadequate access controls on a web folder.
|
CWE-425
Direct Request ('Forced Browsing')
|
CVE-2020-13850
|
2024-11-21 14:02 |
2020-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210236
|
5.3 |
MEDIUM
Network
|
citrix
|
xenapp
|
Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on the server, because the 2FA error page only occurs after a valid username is ent…
|
CWE-203
Information Exposure Through Discrepancy
|
CVE-2020-13998
|
2024-11-21 14:02 |
2020-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210237
|
9.8 |
CRITICAL
Network
|
meetecho
|
janus
|
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_merge in sdp.c has a stack-based buffer overflow.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-13901
|
2024-11-21 14:02 |
2020-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210238
|
7.5 |
HIGH
Network
|
meetecho
|
janus
|
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_preparse in sdp.c has a NULL pointer dereference.
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-13900
|
2024-11-21 14:02 |
2020-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210239
|
7.5 |
HIGH
Network
|
meetecho
|
janus
|
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_process_incoming_request in janus.c discloses information from uninitialized stack memory.
|
CWE-908
Use of Uninitialized Resource
|
CVE-2020-13899
|
2024-11-21 14:02 |
2020-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210240
|
7.5 |
HIGH
Network
|
meetecho
|
janus
|
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_process in sdp.c has a NULL pointer dereference.
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-13898
|
2024-11-21 14:02 |
2020-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|