|
197051
|
7.8 |
HIGH
Local
|
vmware
|
esxi fusion cloud_foundation workstation
|
VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an of…
|
CWE-193
Off-by-one Error
|
CVE-2020-3969
|
2024-11-21 14:32 |
2020-06-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197052
|
5.9 |
MEDIUM
Network
|
ibm
|
security_secret_server
|
IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this …
|
CWE-862
Missing Authorization
|
CVE-2020-4413
|
2024-11-21 14:32 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197053
|
5.3 |
MEDIUM
Network
|
ibm
|
security_secret_server
|
IBM Security Secret Server 10.7 could disclose sensitive information included in installation files to an unauthorized user. IBM X-Force ID: 178182.
|
NVD-CWE-noinfo
|
CVE-2020-4342
|
2024-11-21 14:32 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197054
|
5.3 |
MEDIUM
Network
|
ibm
|
security_secret_server
|
IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in fur…
|
CWE-209
Information Exposure Through an Error Message
|
CVE-2020-4341
|
2024-11-21 14:32 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197055
|
5.3 |
MEDIUM
Network
|
ibm
|
security_secret_server
|
IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in fur…
|
CWE-209
Information Exposure Through an Error Message
|
CVE-2020-4327
|
2024-11-21 14:32 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197056
|
6.1 |
MEDIUM
Network
|
ibm
|
security_secret_server
|
IBM Security Secret Server 10.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potent…
|
CWE-79
Cross-site Scripting
|
CVE-2020-4323
|
2024-11-21 14:32 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197057
|
4.3 |
MEDIUM
Network
|
ibm
|
security_secret_server
|
IBM Security Secret Server 10.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this v…
|
CWE-1021
Improper Restriction of Rendered UI Layers or Frames
|
CVE-2020-4322
|
2024-11-21 14:32 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197058
|
2.4 |
LOW
Physics
|
django-basic-auth-ip-whitelist_project
|
django-basic-auth-ip-whitelist
|
In django-basic-auth-ip-whitelist before 0.3.4, a potential timing attack exists on websites where the basic authentication is used or configured, i.e. BASIC_AUTH_LOGIN and BASIC_AUTH_PASSWORD is set…
|
-
|
CVE-2020-4071
|
2024-11-21 14:32 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197059
|
5.3 |
MEDIUM
Network
|
ibm
|
security_guardium
|
IBM Security Guardium 10.6 and 11.1 may use insufficiently random numbers or values in a security context that depends on unpredictable numbers. IBM X-Force ID: 174807.
|
CWE-330
Use of Insufficiently Random Values
|
CVE-2020-4188
|
2024-11-21 14:32 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197060
|
5.3 |
MEDIUM
Network
|
atlassian
|
jira jira_software_data_center
|
Versions before 8.9.1, Various resources in Jira responded with a 404 instead of redirecting unauthenticated users to the login page, in some situations this may have allowed unauthorised attackers t…
|
CWE-203
Information Exposure Through Discrepancy
|
CVE-2020-4028
|
2024-11-21 14:32 |
2020-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|