|
209661
|
7.8 |
HIGH
Local
|
icinga opensuse
|
icinga leap backports_sle
|
An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script (run as part of the icinga2 systemd service) executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an u…
|
CWE-59
Link Following
|
CVE-2020-14004
|
2024-11-21 14:02 |
2020-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209662
|
7.5 |
HIGH
Network
|
zohocorp
|
manageengine_servicedesk_plus
|
Zoho ManageEngine ServiceDesk Plus before 11.1 build 11115 allows remote unauthenticated attackers to change the installation status of deployed agents.
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2020-14048
|
2024-11-21 14:02 |
2020-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209663
|
7.2 |
HIGH
Network
|
pandorafms
|
pandora_fms
|
Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Repository Manager feature.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-13855
|
2024-11-21 14:02 |
2020-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209664
|
9.8 |
CRITICAL
Network
|
pandorafms
|
pandora_fms
|
Artica Pandora FMS 7.44 allows privilege escalation.
|
CWE-269
Improper Privilege Management
|
CVE-2020-13854
|
2024-11-21 14:02 |
2020-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209665
|
5.4 |
MEDIUM
Network
|
pandorafms
|
pandora_fms
|
Artica Pandora FMS 7.44 has persistent XSS in the Messages feature.
|
CWE-79
Cross-site Scripting
|
CVE-2020-13853
|
2024-11-21 14:02 |
2020-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209666
|
7.2 |
HIGH
Network
|
pandorafms
|
pandora_fms
|
Artica Pandora FMS 7.44 allows arbitrary file upload (leading to remote command execution) via the File Manager feature.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-13852
|
2024-11-21 14:02 |
2020-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209667
|
8.8 |
HIGH
Network
|
pandorafms
|
pandora_fms
|
Artica Pandora FMS 7.44 allows remote command execution via the events feature.
|
CWE-78
OS Command
|
CVE-2020-13851
|
2024-11-21 14:02 |
2020-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209668
|
7.5 |
HIGH
Network
|
pandorafms
|
pandora_fms
|
Artica Pandora FMS 7.44 has inadequate access controls on a web folder.
|
CWE-425
Direct Request ('Forced Browsing')
|
CVE-2020-13850
|
2024-11-21 14:02 |
2020-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209669
|
5.3 |
MEDIUM
Network
|
citrix
|
xenapp
|
Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on the server, because the 2FA error page only occurs after a valid username is ent…
|
CWE-203
Information Exposure Through Discrepancy
|
CVE-2020-13998
|
2024-11-21 14:02 |
2020-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209670
|
9.8 |
CRITICAL
Network
|
meetecho
|
janus
|
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_merge in sdp.c has a stack-based buffer overflow.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-13901
|
2024-11-21 14:02 |
2020-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|