|
208781
|
7.5 |
HIGH
Network
|
nexcom
|
nio_50_firmware
|
The affected product transmits unencrypted sensitive information, which may allow an attacker to access this information on the NIO 50 (all versions).
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2020-25155
|
2024-11-21 14:17 |
2020-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208782
|
7.5 |
HIGH
Network
|
nexcom
|
nio_50_firmware
|
The affected product does not properly validate input, which may allow an attacker to execute a denial-of-service attack on the NIO 50 (all versions).
|
-
|
CVE-2020-25151
|
2024-11-21 14:17 |
2020-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208783
|
8.8 |
HIGH
Network
|
ilias
|
ilias
|
Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for Magpie RSS data.
|
CWE-88
Argument Injection
|
CVE-2020-25268
|
2024-11-21 14:17 |
2020-11-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208784
|
5.4 |
MEDIUM
Network
|
ilias
|
ilias
|
An XSS issue exists in the question-pool file-upload preview feature in ILIAS 6.4.
|
CWE-79
Cross-site Scripting
|
CVE-2020-25267
|
2024-11-21 14:17 |
2020-11-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208785
|
9.8 |
CRITICAL
Network
|
moinmo debian
|
moinmoin debian_linux
|
The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request. An attacker who can upload attachments to the wiki can use this to achieve re…
|
CWE-22
Path Traversal
|
CVE-2020-25074
|
2024-11-21 14:17 |
2020-11-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208786
|
7.8 |
HIGH
Local
|
bbraun
|
onlinesuite_application_package
|
A DLL hijacking vulnerability in the B. Braun OnlineSuite Version AP 3.0 and earlier allows local attackers to execute code on the system as a high privileged user.
|
-
|
CVE-2020-25174
|
2024-11-21 14:17 |
2020-11-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208787
|
9.8 |
CRITICAL
Network
|
bbraun
|
onlinesuite_application_package
|
A relative path traversal attack in the B. Braun OnlineSuite Version AP 3.0 and earlier allows unauthenticated attackers to upload or download arbitrary files.
|
-
|
CVE-2020-25172
|
2024-11-21 14:17 |
2020-11-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208788
|
7.8 |
HIGH
Local
|
bbraun
|
onlinesuite_application_package
|
An Excel Macro Injection vulnerability exists in the export feature in the B. Braun OnlineSuite Version AP 3.0 and earlier via multiple input fields that are mishandled in an Excel export.
|
-
|
CVE-2020-25170
|
2024-11-21 14:17 |
2020-11-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208789
|
7.8 |
HIGH
Local
|
mind
|
imind_server
|
Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat.
|
CWE-79
Cross-site Scripting
|
CVE-2020-25399
|
2024-11-21 14:17 |
2020-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208790
|
8.8 |
HIGH
Network
|
mind
|
imind_server
|
CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality.
|
CWE-1236
Improper Neutralization of Formula Elements in a CSV File
|
CVE-2020-25398
|
2024-11-21 14:17 |
2020-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|