|
210771
|
5.0 |
MEDIUM
Local
|
redhat debian
|
ansible_tower ansible_engine debian_linux
|
A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.…
|
-
|
CVE-2020-1746
|
2024-11-21 14:11 |
2020-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210772
|
9.8 |
CRITICAL
Network
|
apache
|
nuttx
|
The Apache NuttX (Incubating) project provides an optional separate "apps" repository which contains various optional components and example programs. One of these, ftpd, had a NULL pointer dereferen…
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-1939
|
2024-11-21 14:11 |
2020-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210773
|
7.5 |
HIGH
Network
|
libreswan
|
libreswan
|
An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending speciall…
|
-
|
CVE-2020-1763
|
2024-11-21 14:11 |
2020-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210774
|
4.3 |
MEDIUM
Network
|
redhat
|
keycloak single_sign-on openshift_application_runtimes
|
A flaw was found in Keycloak in versions before 9.0.2. This flaw allows a malicious user that is currently logged in, to see the personal information of a previously logged out user in the account ma…
|
CWE-613
Insufficient Session Expiration
|
CVE-2020-1724
|
2024-11-21 14:11 |
2020-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210775
|
5.5 |
MEDIUM
Local
|
redhat
|
keycloak
|
A flaw was found in keycloak in versions before 9.0.0. A logged exception in the HttpMethod class may leak the password given as parameter. The highest threat from this vulnerability is to data confi…
|
CWE-532
Inclusion of Sensitive Information in Log Files
|
CVE-2020-1698
|
2024-11-21 14:11 |
2020-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210776
|
4.2 |
MEDIUM
Network
|
redhat
|
soteria jboss_enterprise_application_platform openshift_application_runtimes jboss_enterprise_application_platform_continuous_delivery
|
A flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently causing security identity corruption across concurrent threads when using EE Security with WildFly Ely…
|
CWE-20
Improper Input Validation
|
CVE-2020-1732
|
2024-11-21 14:11 |
2020-05-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210777
|
9.8 |
CRITICAL
Network
|
apache
|
syncope
|
Vulnerability to Server-Side Template Injection on Mail templates for Apache Syncope 2.0.X releases prior to 2.0.15, 2.1.X releases prior to 2.1.6, enabling attackers to inject arbitrary JEXL express…
|
CWE-74
Injection
|
CVE-2020-1961
|
2024-11-21 14:11 |
2020-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210778
|
9.8 |
CRITICAL
Network
|
apache
|
syncope
|
A Server-Side Template Injection was identified in Apache Syncope prior to 2.1.6 enabling attackers to inject arbitrary Java EL expressions, leading to an unauthenticated Remote Code Execution (RCE) …
|
CWE-917
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
|
CVE-2020-1959
|
2024-11-21 14:11 |
2020-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210779
|
9.8 |
CRITICAL
Network
|
juniper
|
junos
|
A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an un…
|
CWE-22
Path Traversal
|
CVE-2020-1631
|
2024-11-21 14:11 |
2020-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210780
|
7.8 |
HIGH
Local
|
huawei
|
pcmanager
|
Huawei PCManager with versions earlier than 10.0.1.36 has a privilege escalation vulnerability. Due to improper permission management of specific files, local attackers with low permissions can injec…
|
NVD-CWE-noinfo
|
CVE-2020-1817
|
2024-11-21 14:11 |
2020-05-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|