|
210981
|
6.5 |
MEDIUM
Adjacent
|
alberta tracetogether health gov
|
abtracetogether tracetogether covidsafe protego_safe
|
The COVIDSafe (Australia) app 1.0 and 1.1 for iOS allows a remote attacker to crash the app, and consequently interfere with COVID-19 contact tracing, via a Bluetooth advertisement containing manufac…
|
NVD-CWE-noinfo
|
CVE-2020-12717
|
2024-11-21 14:00 |
2020-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210982
|
9.8 |
CRITICAL
Network
|
simplefilelist
|
simple-file-list
|
WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input.
|
CWE-22
Path Traversal
|
CVE-2020-12832
|
2024-11-21 14:00 |
2020-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210983
|
5.3 |
MEDIUM
Network
|
linuxfoundation
|
free_range_routing
|
An issue was discovered in FRRouting FRR (aka Free Range Routing) through 7.3.1. When using the split-config feature, the init script creates an empty config file with world-readable default permissi…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2020-12831
|
2024-11-21 14:00 |
2020-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210984
|
9.8 |
CRITICAL
Network
|
trendnet
|
tv-ip512wn_firmware
|
TRENDnet ProView Wireless camera TV-IP512WN 1.0R 1.0.4 is vulnerable to an unauthenticated stack-based buffer overflow in handling RTSP packets. This may result in remote code execution or denial of …
|
CWE-787
Out-of-bounds Write
|
CVE-2020-12763
|
2024-11-21 14:00 |
2020-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210985
|
6.1 |
MEDIUM
Network
|
iubenda
|
iubenda-cookie-law-solution
|
The iubenda-cookie-law-solution plugin before 2.3.5 for WordPress does not restrict URL sanitization to http protocols.
|
CWE-20
Improper Input Validation
|
CVE-2020-12742
|
2024-11-21 14:00 |
2020-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210986
|
4.3 |
MEDIUM
Network
|
dkd
|
direct_mail
|
The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query.
|
CWE-862
Missing Authorization
|
CVE-2020-12700
|
2024-11-21 14:00 |
2020-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210987
|
6.1 |
MEDIUM
Network
|
dkd
|
direct_mail
|
The direct_mail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl.
|
CWE-601
Open Redirect
|
CVE-2020-12699
|
2024-11-21 14:00 |
2020-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210988
|
4.3 |
MEDIUM
Network
|
dkd
|
direct_mail
|
The direct_mail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables.
|
CWE-862
Missing Authorization
|
CVE-2020-12698
|
2024-11-21 14:00 |
2020-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210989
|
5.3 |
MEDIUM
Network
|
dkd
|
direct_mail
|
The direct_mail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries.
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2020-12697
|
2024-11-21 14:00 |
2020-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210990
|
8.8 |
HIGH
Network
|
igniterealtime
|
spark
|
An issue was discovered in Ignite Realtime Spark 2.8.3 (and the ROAR plugin for it) on Windows. A chat message can include an IMG element with a SRC attribute referencing an external host's IP addres…
|
CWE-200
Information Exposure
|
CVE-2020-12772
|
2024-11-21 14:00 |
2020-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|