|
210641
|
8.8 |
HIGH
Network
|
hyland
|
onbase
|
An issue was discovered in Hyland OnBase through 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. CSRF can be used to log in a user, …
|
CWE-352
Origin Validation Error
|
CVE-2020-25252
|
2024-11-21 14:17 |
2020-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210642
|
9.1 |
CRITICAL
Network
|
hyland
|
onbase
|
An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. Client-side authentication is used for crit…
|
CWE-287
Improper Authentication
|
CVE-2020-25251
|
2024-11-21 14:17 |
2020-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210643
|
7.5 |
HIGH
Network
|
hyland
|
onbase
|
An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. Client applications can write arbitrary dat…
|
NVD-CWE-noinfo
|
CVE-2020-25250
|
2024-11-21 14:17 |
2020-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210644
|
5.3 |
MEDIUM
Network
|
hyland
|
onbase
|
An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. The server typically logs activity only whe…
|
NVD-CWE-noinfo
|
CVE-2020-25249
|
2024-11-21 14:17 |
2020-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210645
|
7.5 |
HIGH
Network
|
hyland
|
onbase
|
An issue was discovered in Hyland OnBase through 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. Directory traversal exists for read…
|
CWE-22
Path Traversal
|
CVE-2020-25248
|
2024-11-21 14:17 |
2020-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210646
|
7.5 |
HIGH
Network
|
hyland
|
onbase
|
An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. Directory traversal exists for writing to files, as demonstrated by the FileName parameter.
|
CWE-22
Path Traversal
|
CVE-2020-25247
|
2024-11-21 14:17 |
2020-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210647
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
The Linux kernel 4.9.x before 4.9.233, 4.14.x before 4.14.194, and 4.19.x before 4.19.140 has a use-after-free because skcd->no_refcnt was not considered during a backport of a CVE-2020-14356 patch. …
|
CWE-416
Use After Free
|
CVE-2020-25220
|
2024-11-21 14:17 |
2020-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210648
|
7.5 |
HIGH
Network
|
libproxy_project debian fedoraproject opensuse canonical
|
libproxy debian_linux fedora leap ubuntu_linux
|
url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. T…
|
CWE-674
Uncontrolled Recursion
|
CVE-2020-25219
|
2024-11-21 14:17 |
2020-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210649
|
7.3 |
HIGH
Network
|
primekey
|
ejbca
|
An issue was discovered in PrimeKey EJBCA 6.x and 7.x before 7.4.1. When using a client certificate to enroll over the EST protocol, no revocation check is performed on that certificate. This vulnera…
|
CWE-295
Improper Certificate Validation
|
CVE-2020-25276
|
2024-11-21 14:17 |
2020-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210650
|
7.8 |
HIGH
Local
|
linux netapp
|
linux_kernel cloud_backup solidfire_\&_hci_management_node hci_compute_node solidfire_baseboard_management_controller solidfire\ _enterprise_sds_\&_hci_storage_node
|
get_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorrect reference counting (caused by gate page mishandling) of the struct page tha…
|
CWE-672
Operation on a Resource after Expiration or Release
|
CVE-2020-25221
|
2024-11-21 14:17 |
2020-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|