|
210791
|
7.5 |
HIGH
Network
|
jetbrains
|
teamcity
|
In JetBrains TeamCity before 2019.2.1, the application state is kept alive after a user ends his session.
|
CWE-613
Insufficient Session Expiration
|
CVE-2020-11688
|
2024-11-21 13:58 |
2020-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210792
|
7.5 |
HIGH
Network
|
jetbrains
|
teamcity
|
In JetBrains TeamCity before 2019.2.2, password values were shown in an unmasked format on several pages.
|
CWE-200
Information Exposure
|
CVE-2020-11687
|
2024-11-21 13:58 |
2020-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210793
|
2.7 |
LOW
Network
|
jetbrains
|
teamcity
|
In JetBrains TeamCity before 2019.1.4, a project administrator was able to retrieve some TeamCity server settings.
|
NVD-CWE-noinfo
|
CVE-2020-11686
|
2024-11-21 13:58 |
2020-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210794
|
7.5 |
HIGH
Network
|
jetbrains
|
goland
|
In JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS.
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2020-11685
|
2024-11-21 13:58 |
2020-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210795
|
8.1 |
HIGH
Adjacent
|
titan
|
sf_rush_smart_band_firmware
|
An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pairing (mode 0 Bluetooth LE security level) The data being transmitted over the a…
|
CWE-347 CWE-306 CWE-319
Improper Verification of Cryptographic Signature Missing Authentication for Critical Function Cleartext Transmission of Sensitive Information
|
CVE-2020-11539
|
2024-11-21 13:58 |
2020-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210796
|
5.3 |
MEDIUM
Network
|
joomla
|
joomla\!
|
An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of com_users allow the unauthorized editing of usergroups.
|
NVD-CWE-noinfo
|
CVE-2020-11891
|
2024-11-21 13:58 |
2020-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210797
|
5.3 |
MEDIUM
Network
|
joomla
|
joomla\!
|
An issue was discovered in Joomla! before 3.9.17. Improper input validations in the usergroup table class could lead to a broken ACL configuration.
|
CWE-20
Improper Input Validation
|
CVE-2020-11890
|
2024-11-21 13:58 |
2020-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210798
|
5.3 |
MEDIUM
Network
|
joomla
|
joomla\!
|
An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of com_users allow the unauthorized deletion of usergroups.
|
NVD-CWE-noinfo
|
CVE-2020-11889
|
2024-11-21 13:58 |
2020-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210799
|
7.5 |
HIGH
Network
|
oppo
|
coloros
|
In ColorOS (oppo mobile phone operating system, based on AOSP frameworks/native code position/services/surfaceflinger surfaceflinger.CPP), RGB is defined on the stack but uninitialized, so when the s…
|
CWE-908
Use of Uninitialized Resource
|
CVE-2020-11828
|
2024-11-21 13:58 |
2020-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210800
|
7.8 |
HIGH
Local
|
re2c canonical
|
re2c ubuntu_linux
|
re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-11958
|
2024-11-21 13:58 |
2020-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|