|
209171
|
4.3 |
MEDIUM
Physics
|
gnome debian canonical opensuse
|
gnome-shell debian_linux ubuntu_linux leap
|
An issue was discovered in certain configurations of GNOME gnome-shell through 3.36.4. When logging out of an account, the password box from the login dialog reappears with the password still visible…
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2020-17489
|
2024-11-21 14:08 |
2020-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209172
|
7.5 |
HIGH
Network
|
radare fedoraproject
|
radare2 fedora
|
radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in r_x509_parse_algorithmidentifier in libr/util/x509.c. This is due to a malformed object identifier in IMAGE_…
|
NVD-CWE-noinfo
|
CVE-2020-17487
|
2024-11-21 14:08 |
2020-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209173
|
9.8 |
CRITICAL
Network
|
turcom
|
trcwifizone
|
Turcom TRCwifiZone through 2020-08-10 allows authentication bypass by visiting manage/control.php and ignoring 302 Redirect responses.
|
CWE-670
Always-Incorrect Control Flow Implementation
|
CVE-2020-17466
|
2024-11-21 14:08 |
2020-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209174
|
7.8 |
HIGH
Local
|
telegram
|
telegram_desktop
|
Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat window with a filename that lacks an ex…
|
CWE-863
Incorrect Authorization
|
CVE-2020-17448
|
2024-11-21 14:08 |
2020-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209175
|
6.1 |
MEDIUM
Network
|
tiny
|
tinymce
|
TinyMCE before 4.9.7 and 5.x before 5.1.4 allows XSS in the core parser, the paste plugin, and the visualchars plugin by using the clipboard or APIs to insert content into the editor.
|
CWE-79
Cross-site Scripting
|
CVE-2020-17480
|
2024-11-21 14:08 |
2020-08-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209176
|
9.8 |
CRITICAL
Network
|
json_pattern_validator_project
|
json_pattern_validator
|
jpv (aka Json Pattern Validator) before 2.2.2 does not properly validate input, as demonstrated by a corrupted array.
|
CWE-20
Improper Input Validation
|
CVE-2020-17479
|
2024-11-21 14:08 |
2020-08-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209177
|
7.5 |
HIGH
Network
|
p5-crypt-perl_project
|
p5-crypt-perl
|
ECDSA/EC/Point.pm in Crypt::Perl before 0.33 does not properly consider timing attacks against the EC point multiplication algorithm.
|
CWE-203
Information Exposure Through Discrepancy
|
CVE-2020-17478
|
2024-11-21 14:08 |
2020-08-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209178
|
6.1 |
MEDIUM
Network
|
mibew
|
messenger
|
Mibew Messenger before 3.2.7 allows XSS via a crafted user name.
|
CWE-79
Cross-site Scripting
|
CVE-2020-17476
|
2024-11-21 14:08 |
2020-08-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209179
|
7.2 |
HIGH
Network
|
flatcore
|
flatcore
|
flatCore before 1.5.7 allows upload and execution of a .php file by an admin.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-17452
|
2024-11-21 14:08 |
2020-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209180
|
4.8 |
MEDIUM
Network
|
flatcore
|
flatcore
|
flatCore before 1.5.7 allows XSS by an admin via the acp/acp.php?tn=pages&sub=edit&editpage=1 page_linkname, page_title, page_content, or page_extracontent parameter, or the acp/acp.php?tn=system&sub…
|
CWE-79
Cross-site Scripting
|
CVE-2020-17451
|
2024-11-21 14:08 |
2020-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|