|
198561
|
7.5 |
HIGH
Network
|
cisco
|
webex_meetings_online
|
A vulnerability in Cisco Webex Meetings Suite sites and Cisco Webex Meetings Online sites could allow an unauthenticated, remote attendee to join a password-protected meeting without providing the me…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2020-3142
|
2024-11-21 14:30 |
2020-01-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198562
|
8.8 |
HIGH
Local
|
cisco
|
sd-wan_firmware
|
A vulnerability in the CLI of the Cisco SD-WAN Solution vManage software could allow an authenticated, local attacker to elevate privileges to root-level privileges on the underlying operating system…
|
CWE-269
Improper Privilege Management
|
CVE-2020-3115
|
2024-11-21 14:30 |
2020-01-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198563
|
5.3 |
MEDIUM
Network
|
cisco
|
application_policy_infrastructure_controller
|
A vulnerability in the out of band (OOB) management interface IP table rule programming for Cisco Application Policy Infrastructure Controller (APIC) could allow an unauthenticated, remote attacker t…
|
CWE-20
Improper Input Validation
|
CVE-2020-3139
|
2024-11-21 14:30 |
2020-01-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198564
|
6.1 |
MEDIUM
Network
|
cisco
|
jabber_guest
|
A vulnerability in the web-based management interface of Cisco Jabber Guest could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-ba…
|
CWE-79
Cross-site Scripting
|
CVE-2020-3136
|
2024-11-21 14:30 |
2020-01-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198565
|
6.5 |
MEDIUM
Network
|
cisco
|
email_security_appliance
|
A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) c…
|
CWE-20
Improper Input Validation
|
CVE-2020-3134
|
2024-11-21 14:30 |
2020-01-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198566
|
6.5 |
MEDIUM
Network
|
cisco
|
webex_teams
|
A vulnerability in the Cisco Webex Teams client for Windows could allow an authenticated, remote attacker to cause the client to crash, resulting in a denial of service (DoS) condition. The attacker …
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2020-3131
|
2024-11-21 14:30 |
2020-01-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198567
|
4.8 |
MEDIUM
Network
|
cisco
|
unity_connection
|
A vulnerability in the web-based management interface of Cisco Unity Connection Software could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack. The vulne…
|
CWE-79
Cross-site Scripting
|
CVE-2020-3129
|
2024-11-21 14:30 |
2020-01-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198568
|
6.1 |
MEDIUM
Network
|
cisco
|
sg250x-24_firmware sg250x-24p_firmware sg250x-48_firmware sg250x-48p_firmware sg250-08_firmware sg250-08hp_firmware sg250-10p_firmware sg250-18_firmware sg250-26_firmware s…
|
A vulnerability in the web-based management interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack…
|
CWE-79
Cross-site Scripting
|
CVE-2020-3121
|
2024-11-21 14:30 |
2020-01-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198569
|
5.4 |
MEDIUM
Network
|
openmrs
|
appointment_scheduling_module
|
A vulnerability was found in OpenMRS Appointment Scheduling Module up to 1.12.x. It has been classified as problematic. This affects the function validateFieldName of the file api/src/main/java/org/o…
|
CWE-79
Cross-site Scripting
|
CVE-2020-36635
|
2024-11-21 14:29 |
2022-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198570
|
9.1 |
CRITICAL
Network
|
unzip_project
|
unzip
|
Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory.
|
CWE-22
Path Traversal
|
CVE-2020-36561
|
2024-11-21 14:29 |
2022-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|