|
209061
|
9.8 |
CRITICAL
Network
|
apache
|
couchdb
|
CouchDB version 3.0.0 shipped with a new configuration setting that governs access control to the entire database server called `require_valid_user_except_for_up`. It was meant as an extension to the…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2020-1955
|
2024-11-21 14:11 |
2020-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209062
|
7.5 |
HIGH
Network
|
redhat
fedoraproject
|
resteasy
fedora
|
A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, where an improper input validation results in returning an illegal header t…
|
NVD-CWE-Other
|
CVE-2020-1695
|
2024-11-21 14:11 |
2020-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209063
|
9.8 |
CRITICAL
Network
|
facebook
|
proxygen
|
A use-after-free is possible due to an error in lifetime management in the request adaptor when a malicious client invokes request error handling in a specific sequence. This issue affects versions o…
|
CWE-416
Use After Free
|
CVE-2020-1897
|
2024-11-21 14:11 |
2020-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209064
|
5.9 |
MEDIUM
Network
|
redhat
|
keycloak
openstack
|
A flaw was found in Keycloak in versions before 10.0.0, where it does not perform the TLS hostname verification while sending emails using the SMTP server. This flaw allows an attacker to perform a m…
|
CWE-295
Improper Certificate Validation
|
CVE-2020-1758
|
2024-11-21 14:11 |
2020-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209065
|
7.1 |
HIGH
Local
|
huawei
|
honor_view_20_firmware
honor_20_firmware
honor_20_pro_firmware
honor_magic2_firmware
|
Honor 20;HONOR 20 PRO;Honor Magic2;HUAWEI Mate 20 X;HUAWEI P30;HUAWEI P30 Pro;Honor View 20 smartphones with versions earlier than 10.0.0.187(C00E60R4P11); versions earlier than 10.0.0.187(C00E60R4P1…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-1808
|
2024-11-21 14:11 |
2020-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209066
|
4.7 |
MEDIUM
Local
|
apache
|
flink
|
A vulnerability in Apache Flink (1.1.0 to 1.1.5, 1.2.0 to 1.2.1, 1.3.0 to 1.3.3, 1.4.0 to 1.4.2, 1.5.0 to 1.5.6, 1.6.0 to 1.6.4, 1.7.0 to 1.7.2, 1.8.0 to 1.8.3, 1.9.0 to 1.9.2, 1.10.0) where, when ru…
|
NVD-CWE-noinfo
|
CVE-2020-1960
|
2024-11-21 14:11 |
2020-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209067
|
6.1 |
MEDIUM
Network
|
apache
oracle
|
activemq
flexcube_private_banking
enterprise_repository
communications_element_manager
communications_diameter_signaling_router
communications_session_report_manager
communications_…
|
In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue.
|
CWE-79
Cross-site Scripting
|
CVE-2020-1941
|
2024-11-21 14:11 |
2020-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209068
|
6.3 |
MEDIUM
Local
|
apache
canonical
fedoraproject
opensuse
oracle
|
ant
ubuntu_linux
fedora
leap
flexcube_investor_servicing
flexcube_private_banking
primavera_unifier
retail_integration_bus
retail_store_inventory_management
enterprise_repo…
|
Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The…
|
CWE-668
Exposure of Resource to Wrong Sphere
|
CVE-2020-1945
|
2024-11-21 14:11 |
2020-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209069
|
6.1 |
MEDIUM
Network
|
paloaltonetworks
|
pan-os
|
An open redirection vulnerability in the GlobalProtect component of Palo Alto Networks PAN-OS allows an attacker to specify an arbitrary redirection target away from the trusted GlobalProtect gateway…
|
CWE-601
Open Redirect
|
CVE-2020-1997
|
2024-11-21 14:11 |
2020-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209070
|
8.8 |
HIGH
Network
|
paloaltonetworks
|
pan-os
|
An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of the intended SAML permissions of the account when the username is shared for the…
|
CWE-863
Incorrect Authorization
|
CVE-2020-1998
|
2024-11-21 14:11 |
2020-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
