|
197221
|
7.5 |
HIGH
Network
|
zigor
|
zgr_tps200_ng_firmware
|
ZGR TPS200 NG in its 2.00 firmware version and 1.01 hardware version, allows a remote attacker with access to the web application and knowledge of the routes (URIs) used by the application, to access…
|
CWE-200
Information Exposure
|
CVE-2020-8975
|
2024-11-21 14:39 |
2022-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197222
|
9.1 |
CRITICAL
Network
|
zigor
|
zgr_tps200_ng_firmware
|
In ZGR TPS200 NG 2.00 firmware version and 1.01 hardware version, the firmware upload process does not perform any type of restriction. This allows an attacker to modify it and re-upload it via web w…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-8974
|
2024-11-21 14:39 |
2022-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197223
|
8.1 |
HIGH
Adjacent
|
zigor
|
zgr_tps200_ng_firmware
|
ZGR TPS200 NG in its 2.00 firmware version and 1.01 hardware version, does not properly accept specially constructed requests. This allows an attacker with access to the network where the affected as…
|
NVD-CWE-noinfo
|
CVE-2020-8973
|
2024-11-21 14:39 |
2022-10-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197224
|
3.1 |
LOW
Network
|
kubernetes
|
kubernetes
|
As mitigations to a report from 2019 and CVE-2020-8555, Kubernetes attempts to prevent proxied connections from accessing link-local or localhost networks when making user-driven connections to Servi…
|
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition
|
CVE-2020-8562
|
2024-11-21 14:39 |
2022-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197225
|
6.5 |
MEDIUM
Adjacent
|
aeotec samsung zooz silabs
|
zw090-a sth-eth-200 zst10 uzb-7 700_series_firmware 500_series_firmware
|
Z-Wave devices using Silicon Labs 500 and 700 series chipsets, including but not likely limited to the SiLabs UZB-7 version 7.00, ZooZ ZST10 version 6.04, Aeon Labs ZW090-A version 3.95, and Samsung …
|
NVD-CWE-noinfo
|
CVE-2020-9061
|
2024-11-21 14:39 |
2022-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197226
|
6.5 |
MEDIUM
Adjacent
|
silabs aeotec zooz fibaro
|
500_series_firmware zw090-a zst10 zen20 zen25 fgwpb-111
|
Z-Wave devices based on Silicon Labs 500 series chipsets using S2, including but likely not limited to the ZooZ ZST10 version 6.04, ZooZ ZEN20 version 5.03, ZooZ ZEN25 version 5.03, Aeon Labs ZW090-A…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2020-9060
|
2024-11-21 14:39 |
2022-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197227
|
6.5 |
MEDIUM
Adjacent
|
silabs schlage
|
500_series_firmware be468
|
Z-Wave devices based on Silicon Labs 500 series chipsets using S0 authentication are susceptible to uncontrolled resource consumption leading to battery exhaustion. As an example, the Schlage BE468 v…
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2020-9059
|
2024-11-21 14:39 |
2022-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197228
|
8.1 |
HIGH
Adjacent
|
silabs jasco dome linear
|
500_series_firmware zw4201 dm501 lb60z-1
|
Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 version 3.5, Dome DM501 version 4.26, and Jasco ZW4201 vers…
|
CWE-311
Missing Encryption of Sensitive Data
|
CVE-2020-9058
|
2024-11-21 14:39 |
2022-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197229
|
8.8 |
HIGH
Adjacent
|
linear silabs
|
wapirz-1 wadwaz-1 100_series_firmware 200_series_firmware 300_series_firmware
|
Z-Wave devices based on Silicon Labs 100, 200, and 300 series chipsets do not support encryption, allowing an attacker within radio range to take control of or cause a denial of service to a vulnerab…
|
CWE-311
Missing Encryption of Sensitive Data
|
CVE-2020-9057
|
2024-11-21 14:39 |
2022-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197230
|
7.1 |
HIGH
Local
|
parallels
|
remote_application_server
|
Parallels Remote Application Server (RAS) allows a local attacker to retrieve certain profile password in clear text format by uploading a previously stored cyphered file by Parallels RAS. The confid…
|
NVD-CWE-Other
|
CVE-2020-8968
|
2024-11-21 14:39 |
2021-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|