|
198731
|
5.4 |
MEDIUM
Network
|
ni-consul
|
sales_force_assistant
|
Cross-site scripting vulnerability in Sales Force Assistant version 11.2.48 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2020-5570
|
2024-11-21 14:34 |
2020-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198732
|
6.1 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 5.0.0 allows remote attackers to inject arbitrary web script or HTML via the applications 'Messages' and 'Bulletin Board'.
|
CWE-79
Cross-site Scripting
|
CVE-2020-5568
|
2024-11-21 14:34 |
2020-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198733
|
7.5 |
HIGH
Network
|
cybozu
|
garoon
|
Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in Application Menu.
|
CWE-287
Improper Authentication
|
CVE-2020-5567
|
2024-11-21 14:34 |
2020-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198734
|
4.3 |
MEDIUM
Network
|
cybozu
|
garoon
|
Improper authorization vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to alter the application's data via the applications 'E-mail' and 'Messages'.
|
NVD-CWE-noinfo
|
CVE-2020-5566
|
2024-11-21 14:34 |
2020-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198735
|
4.3 |
MEDIUM
Network
|
cybozu
|
garoon
|
Improper input validation vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows a remote authenticated attacker to alter the application's data via the applications 'Workflow' and 'MultiReport'.
|
CWE-20
Improper Input Validation
|
CVE-2020-5565
|
2024-11-21 14:34 |
2020-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198736
|
6.1 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the application 'E-mail'.
|
CWE-79
Cross-site Scripting
|
CVE-2020-5564
|
2024-11-21 14:34 |
2020-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198737
|
5.3 |
MEDIUM
Network
|
cybozu
|
garoon
|
Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in the affected product via the API.
|
CWE-287
Improper Authentication
|
CVE-2020-5563
|
2024-11-21 14:34 |
2020-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198738
|
4.9 |
MEDIUM
Network
|
cybozu
|
garoon
|
Server-side request forgery (SSRF) vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows a remote attacker with an administrative privilege to issue arbitrary HTTP requests to other web servers via V-…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2020-5562
|
2024-11-21 14:34 |
2020-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198739
|
8.1 |
HIGH
Adjacent
|
f5
|
big-iq_centralized_management
|
In BIG-IQ 5.2.0-7.0.0, high availability (HA) synchronization mechanisms do not use any form of authentication for connecting to the peer.
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2020-5870
|
2024-11-21 14:34 |
2020-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198740
|
9.1 |
CRITICAL
Network
|
f5
|
big-iq_centralized_management
|
In BIG-IQ 5.2.0-7.0.0, high availability (HA) synchronization is not secure by TLS and may allow on-path attackers to read / modify confidential data in transit.
|
CWE-924
Improper Enforcement of Message Integrity During Transmission in a Communication Channel
|
CVE-2020-5869
|
2024-11-21 14:34 |
2020-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|