|
198811
|
8.8 |
HIGH
Adjacent
|
dlink
|
dap-1330_firmware
|
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploi…
|
CWE-287
Improper Authentication
|
CVE-2020-8861
|
2024-11-21 14:39 |
2020-02-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198812
|
8.0 |
HIGH
Adjacent
|
google
|
android
|
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S10 Firmware G973FXXS3ASJA, O(8.x), P(9.0), Q(10.0) devices with Exynos chipsets. User…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-8860
|
2024-11-21 14:39 |
2020-02-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198813
|
6.1 |
MEDIUM
Network
|
westerndigital
|
mycloud.com
|
Western Digital mycloud.com before Web Version 2.2.0-134 allows XSS.
|
CWE-79
Cross-site Scripting
|
CVE-2020-8960
|
2024-11-21 14:39 |
2020-02-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198814
|
7.8 |
HIGH
Local
|
trendmicro
|
vulnerability_protection
|
Trend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an attack to use the product installer to load other DLL files located in the same directory.
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2020-8601
|
2024-11-21 14:39 |
2020-02-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198815
|
9.8 |
CRITICAL
Network
|
arista
|
dcs-7050qx-32s-r_firmware dcs-7050cx3-32s-r_firmware dcs-7280sram-48c6-r_firmware
|
Arista DCS-7050QX-32S-R 4.20.9M, DCS-7050CX3-32S-R 4.20.11M, and DCS-7280SRAM-48C6-R 4.22.0.1F devices (and possibly other products) allow attackers to bypass intended TACACS+ shell restrictions via …
|
NVD-CWE-noinfo
|
CVE-2020-9015
|
2024-11-21 14:39 |
2020-02-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198816
|
5.4 |
MEDIUM
Network
|
machothemes
|
modula_image_gallery
|
A stored XSS vulnerability exists in the Modula Image Gallery plugin before 2.2.5 for WordPress. Successful exploitation of this vulnerability would allow an authenticated low-privileged user to inje…
|
CWE-79
Cross-site Scripting
|
CVE-2020-9003
|
2024-11-21 14:39 |
2020-02-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198817
|
9.1 |
CRITICAL
Network
|
western_digital
|
my_cloud_home ibi
|
Western Digital My Cloud Home before 3.6.0 and ibi before 3.6.0 allow Session Fixation.
|
CWE-384
Session Fixation
|
CVE-2020-8990
|
2024-11-21 14:39 |
2020-02-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198818
|
7.8 |
HIGH
Local
|
westerndigital
|
westerndigitalssddashboardsetup.exe sandiskssddashboardsetup.exe
|
Western Digital WesternDigitalSSDDashboardSetup.exe before 3.0.2.0 allows DLL Hijacking.
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2020-8959
|
2024-11-21 14:39 |
2020-02-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198819
|
5.4 |
MEDIUM
Network
|
hitrontech
|
coda-4582u_firmware
|
Hitron CODA-4582U 7.1.1.30 devices allow XSS via a Managed Device name on the Wireless > Access Control > Add Managed Device screen.
|
CWE-79
Cross-site Scripting
|
CVE-2020-8824
|
2024-11-21 14:39 |
2020-02-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198820
|
5.3 |
MEDIUM
Network
|
synacor
|
zimbra_collaboration_suite
|
An issue was discovered in Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7. When grantors revoked a shared calendar in Outlook, the calendar stayed mounted and accessible.
|
CWE-281
Improper Preservation of Permissions
|
CVE-2020-8633
|
2024-11-21 14:39 |
2020-02-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|