|
197601
|
2.3 |
LOW
Local
|
huawei
|
mate_20_firmware
mate_20_x_firmware
mate_20_rs_firmware
magic2_firmware
|
HUAWEI Mate 20 versions earlier than 10.1.0.160(C00E160R3P8), HUAWEI Mate 20 X versions earlier than 10.1.0.135(C00E135R2P8), HUAWEI Mate 20 RS versions earlier than 10.1.0.160(C786E160R3P8), and Hon…
|
CWE-22
Path Traversal
|
CVE-2020-9252
|
2024-11-21 14:40 |
2020-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197602
|
3.3 |
LOW
Local
|
huawei
|
cloudengine_12800_firmware
cloudengine_5800_firmware
cloudengine_6800_firmware
cloudengine_7800_firmware
|
There is a information leak vulnerability in some Huawei products, and it could allow a local attacker to get information. The vulnerability is due to the improper management of the username. An atta…
|
NVD-CWE-noinfo
|
CVE-2020-9102
|
2024-11-21 14:40 |
2020-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197603
|
6.1 |
MEDIUM
Network
|
apache
|
airflow
|
An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerability was discovered in the Chart pages of the the "classic" UI.
|
CWE-79
Cross-site Scripting
|
CVE-2020-9485
|
2024-11-21 14:40 |
2020-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197604
|
5.4 |
MEDIUM
Network
|
silverstripe
|
silverstripe
|
In SilverStripe through 4.5, malicious users with a valid Silverstripe CMS login (usually CMS access) can craft profile information which can lead to XSS for other users through specially crafted log…
|
CWE-79
Cross-site Scripting
|
CVE-2020-9311
|
2024-11-21 14:40 |
2020-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197605
|
8.8 |
HIGH
Network
|
silverstripe
|
recipe
mimevalidator
|
Silverstripe CMS through 4.5 can be susceptible to script execution from malicious upload contents under allowed file extensions (for example HTML code in a TXT file). When these files are stored as …
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-9309
|
2024-11-21 14:40 |
2020-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197606
|
6.1 |
MEDIUM
Network
|
apache
|
ofbiz
|
XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03
|
CWE-79
CWE-502
Cross-site Scripting
Deserialization of Untrusted Data
|
CVE-2020-9496
|
2024-11-21 14:40 |
2020-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197607
|
9.8 |
CRITICAL
Network
|
netflix
|
titus
|
Netflix Titus, all versions prior to version v0.1.1-rc.274, uses Java Bean Validation (JSR 380) custom constraint validators. When building custom constraint violation error messages, different types…
|
CWE-917
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
|
CVE-2020-9297
|
2024-11-21 14:40 |
2020-07-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197608
|
6.5 |
MEDIUM
Adjacent
|
huawei
|
p30_firmware
p30_pro_firmware
|
HUAWEI P30 and HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E22R2P5) and versions earlier than 10.1.0.160(C00E160R2P8) have an information disclosure vulnerability. Certain WI…
|
NVD-CWE-noinfo
|
CVE-2020-9260
|
2024-11-21 14:40 |
2020-07-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197609
|
5.5 |
MEDIUM
Local
|
huawei
|
p30_firmware
|
HUAWEI P30 smartphone with versions earlier than 10.1.0.135(C00E135R2P11) have an improper input verification vulnerability. An attribution in a module is not set correctly and some verification is l…
|
CWE-20
Improper Input Validation
|
CVE-2020-9258
|
2024-11-21 14:40 |
2020-07-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197610
|
8.8 |
HIGH
Network
|
dlink
|
dir-610_firmware
|
D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
|
CWE-78
OS Command
|
CVE-2020-9377
|
2024-11-21 14:40 |
2020-07-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
