|
209531
|
7.5 |
HIGH
Network
|
apache
debian
|
shiro
debian_linux
|
Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass.
|
NVD-CWE-noinfo
|
CVE-2020-13933
|
2024-11-21 14:02 |
2020-08-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209532
|
8.8 |
HIGH
Network
|
apache
|
solr
|
Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0. The Replication handler (https://lucene.apache.org/solr/guide/8_6/index-replication.html#http-api-co…
|
CWE-20
Improper Input Validation
|
CVE-2020-13941
|
2024-11-21 14:02 |
2020-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209533
|
4.3 |
MEDIUM
Network
|
redhat
|
quay
|
An information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1. This flaw allows an attacker who can create a build trigger in a repository, to disclose the names of robot…
|
NVD-CWE-noinfo
|
CVE-2020-14313
|
2024-11-21 14:02 |
2020-08-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209534
|
7.1 |
HIGH
Network
|
redhat
|
cloudforms_management_engine
|
Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw. With the access to add Ansible Tower provider, an attacker could scan and attack systems from the internal netw…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2020-14296
|
2024-11-21 14:02 |
2020-08-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209535
|
9.8 |
CRITICAL
Network
|
apache
|
skywalking
|
**Resolved** Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL injection vulnerability in the wildcard query cases.
|
CWE-89
SQL Injection
|
CVE-2020-13921
|
2024-11-21 14:02 |
2020-08-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209536
|
6.0 |
MEDIUM
Local
|
gnu
redhat
opensuse
canonical
|
grub2
enterprise_linux
enterprise_linux_eus
enterprise_linux_server_tus
enterprise_linux_server_aus
leap
ubuntu_linux
|
There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an inode size of UINT32_MAX causes an arithmetic overflow lead…
|
-
|
CVE-2020-14311
|
2024-11-21 14:02 |
2020-08-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209537
|
6.0 |
MEDIUM
Local
|
gnu
redhat
opensuse
canonical
|
grub2
enterprise_linux
enterprise_linux_eus
enterprise_linux_server_tus
enterprise_linux_server_aus
leap
ubuntu_linux
|
There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a font name to be at max UINT32_MAX - 1 length in bytes but it doesn't verify it before proceed with bu…
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2020-14310
|
2024-11-21 14:02 |
2020-08-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209538
|
7.8 |
HIGH
Local
|
pi-hole
|
pi-hole
|
An issue was discovered in Pi-Hole through 5.0. The local www-data user has sudo privileges to execute the pihole core script as root without a password, which could allow an attacker to obtain root …
|
CWE-78
CWE-269
OS Command
Improper Privilege Management
|
CVE-2020-14162
|
2024-11-21 14:02 |
2020-07-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209539
|
9.1 |
CRITICAL
Network
|
abus
|
secvest_hybrid_fumo50110_firmware
|
The ABUS Secvest FUMO50110 hybrid module does not have any security mechanism that ensures confidentiality or integrity of RF packets that are exchanged with an alarm panel. This makes it easier to c…
|
CWE-287
Improper Authentication
|
CVE-2020-14158
|
2024-11-21 14:02 |
2020-07-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209540
|
6.7 |
MEDIUM
Local
|
gnu
opensuse
|
grub2
leap
|
There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of UINT32 bytes in size. The name size leads to an arithmetic ov…
|
CWE-787
CWE-190
Out-of-bounds Write
Integer Overflow or Wraparound
|
CVE-2020-14309
|
2024-11-21 14:02 |
2020-07-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
