|
196841
|
7.8 |
HIGH
Local
|
huawei
|
p30_pro_firmware
|
HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C10E11R5P1), and versions earlier than 10.1.0.160(C00E160R2P8) have a logic chec…
|
CWE-20
Improper Input Validation
|
CVE-2020-9254
|
2024-11-21 14:40 |
2020-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196842
|
5.5 |
MEDIUM
Local
|
huawei
|
moana-al00b_firmware
|
Huawei Smart Phones Moana-AL00B with versions earlier than 10.1.0.166 have a missing initialization of resource vulnerability. An attacker tricks the user into installing then running a crafted appli…
|
CWE-909
Missing Initialization of Resource
|
CVE-2020-9227
|
2024-11-21 14:40 |
2020-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196843
|
8.8 |
HIGH
Network
|
huawei
|
p30_pro_firmware
|
HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C10E11R5P1), and versions earlier than 10.1.0.160(C00E160R2P8) have a buffer ove…
|
CWE-120
Classic Buffer Overflow
|
CVE-2020-9257
|
2024-11-21 14:40 |
2020-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196844
|
2.3 |
LOW
Local
|
huawei
|
mate_20_firmware mate_20_x_firmware mate_20_rs_firmware magic2_firmware
|
HUAWEI Mate 20 versions earlier than 10.1.0.160(C00E160R3P8), HUAWEI Mate 20 X versions earlier than 10.1.0.135(C00E135R2P8), HUAWEI Mate 20 RS versions earlier than 10.1.0.160(C786E160R3P8), and Hon…
|
CWE-22
Path Traversal
|
CVE-2020-9252
|
2024-11-21 14:40 |
2020-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196845
|
3.3 |
LOW
Local
|
huawei
|
cloudengine_12800_firmware cloudengine_5800_firmware cloudengine_6800_firmware cloudengine_7800_firmware
|
There is a information leak vulnerability in some Huawei products, and it could allow a local attacker to get information. The vulnerability is due to the improper management of the username. An atta…
|
NVD-CWE-noinfo
|
CVE-2020-9102
|
2024-11-21 14:40 |
2020-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196846
|
6.1 |
MEDIUM
Network
|
apache
|
airflow
|
An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerability was discovered in the Chart pages of the the "classic" UI.
|
CWE-79
Cross-site Scripting
|
CVE-2020-9485
|
2024-11-21 14:40 |
2020-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196847
|
5.4 |
MEDIUM
Network
|
silverstripe
|
silverstripe
|
In SilverStripe through 4.5, malicious users with a valid Silverstripe CMS login (usually CMS access) can craft profile information which can lead to XSS for other users through specially crafted log…
|
CWE-79
Cross-site Scripting
|
CVE-2020-9311
|
2024-11-21 14:40 |
2020-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196848
|
8.8 |
HIGH
Network
|
silverstripe
|
recipe mimevalidator
|
Silverstripe CMS through 4.5 can be susceptible to script execution from malicious upload contents under allowed file extensions (for example HTML code in a TXT file). When these files are stored as …
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-9309
|
2024-11-21 14:40 |
2020-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196849
|
6.1 |
MEDIUM
Network
|
apache
|
ofbiz
|
XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03
|
CWE-79 CWE-502
Cross-site Scripting Deserialization of Untrusted Data
|
CVE-2020-9496
|
2024-11-21 14:40 |
2020-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196850
|
9.8 |
CRITICAL
Network
|
netflix
|
titus
|
Netflix Titus, all versions prior to version v0.1.1-rc.274, uses Java Bean Validation (JSR 380) custom constraint validators. When building custom constraint violation error messages, different types…
|
CWE-917
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
|
CVE-2020-9297
|
2024-11-21 14:40 |
2020-07-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|