|
197831
|
7.0 |
HIGH
Local
|
pam_setquota_project
|
pam_setquota
|
pam_setquota.c in the pam_setquota module before 2020-05-29 for Linux-PAM allows local attackers to set their quota on an arbitrary filesystem, in certain situations where the attacker's home directo…
|
NVD-CWE-noinfo
|
CVE-2020-36394
|
2024-11-21 14:29 |
2021-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197832
|
4.3 |
MEDIUM
Network
|
civicrm
|
civicrm
|
In CiviCRM before 5.28.1 and CiviCRM ESR before 5.27.5 ESR, the CKEditor configuration form allows CSRF.
|
CWE-352
Origin Validation Error
|
CVE-2020-36389
|
2024-11-21 14:29 |
2021-06-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197833
|
8.8 |
HIGH
Network
|
civicrm
|
civicrm
|
In CiviCRM before 5.21.3 and 5.22.x through 5.24.x before 5.24.3, users may be able to upload and execute a crafted PHAR archive.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-36388
|
2024-11-21 14:29 |
2021-06-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197834
|
7.8 |
HIGH
Local
|
linux netapp
|
linux_kernel h300s_firmware h500s_firmware h700s_firmware h300e_firmware h500e_firmware h700e_firmware h410s_firmware h410c_firmware
|
An issue was discovered in the Linux kernel before 5.8.2. fs/io_uring.c has a use-after-free related to io_async_task_func and ctx reference holding, aka CID-6d816e088c35.
|
CWE-416
Use After Free
|
CVE-2020-36387
|
2024-11-21 14:29 |
2021-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197835
|
7.1 |
HIGH
Local
|
linux
|
linux_kernel
|
An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hci_event.c has a slab out-of-bounds read in hci_extended_inquiry_result_evt, aka CID-51c19bf3d5cf.
|
CWE-125
Out-of-bounds Read
|
CVE-2020-36386
|
2024-11-21 14:29 |
2021-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197836
|
7.8 |
HIGH
Local
|
linux netapp starwindsoftware
|
linux_kernel h300s_firmware h500s_firmware h700s_firmware h300e_firmware h500e_firmware h700e_firmware h410s_firmware h410c_firmware starwind_san_\&_nas starwind_vir…
|
An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after-free because the ctx is reached via the ctx_list in some ucma_migrate_id situations where ucma_…
|
CWE-416
Use After Free
|
CVE-2020-36385
|
2024-11-21 14:29 |
2021-06-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197837
|
6.1 |
MEDIUM
Network
|
pagelayer
|
pagelayer
|
PageLayer before 1.3.5 allows reflected XSS via color settings.
|
CWE-79
Cross-site Scripting
|
CVE-2020-36384
|
2024-11-21 14:29 |
2021-06-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197838
|
6.1 |
MEDIUM
Network
|
pagelayer
|
pagelayer
|
PageLayer before 1.3.5 allows reflected XSS via the font-size parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2020-36383
|
2024-11-21 14:29 |
2021-06-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197839
|
7.5 |
HIGH
Network
|
openvpn
|
openvpn_access_server
|
OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase via incorrect authentication token data in an early phase of the user authentica…
|
CWE-617
Reachable Assertion
|
CVE-2020-36382
|
2024-11-21 14:29 |
2021-06-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197840
|
5.5 |
MEDIUM
Local
|
cesanta
|
mjs
|
Stack overflow vulnerability in parse_equality Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
|
CWE-674
Uncontrolled Recursion
|
CVE-2020-36375
|
2024-11-21 14:29 |
2021-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|