|
209921
|
5.4 |
MEDIUM
Network
|
freerdp
opensuse
debian
|
freerdp
leap
debian_linux
|
In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a manipulated server can instruct the client to allocate a buffer with a smaller …
|
-
|
CVE-2020-11038
|
2024-11-21 13:56 |
2020-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209922
|
6.5 |
MEDIUM
Network
|
freerdp
opensuse
debian
|
freerdp
leap
debian_linux
|
In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOG_TRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as str…
|
-
|
CVE-2020-11019
|
2024-11-21 13:56 |
2020-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209923
|
6.5 |
MEDIUM
Network
|
freerdp
opensuse
debian
|
freerdp
leap
debian_linux
|
In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. T…
|
-
|
CVE-2020-11018
|
2024-11-21 13:56 |
2020-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209924
|
6.5 |
MEDIUM
Network
|
freerdp
opensuse
debian
|
freerdp
leap
debian_linux
|
In FreeRDP less than or equal to 2.0.0, by providing manipulated input a malicious client can create a double free condition and crash the server. This is fixed in version 2.1.0.
|
-
|
CVE-2020-11017
|
2024-11-21 13:56 |
2020-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209925
|
6.1 |
MEDIUM
Network
|
kaminari_project
debian
|
kaminari
debian_linux
|
In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed in 1.2.1.
|
-
|
CVE-2020-11082
|
2024-11-21 13:56 |
2020-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209926
|
9.8 |
CRITICAL
Network
|
node-dns-sync_project
|
node-dns-sync
|
node-dns-sync (npm module dns-sync) through 0.2.0 allows execution of arbitrary commands . This issue may lead to remote code execution if a client of the library calls the vulnerable method with unt…
|
CWE-77
Command Injection
|
CVE-2020-11079
|
2024-11-21 13:56 |
2020-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209927
|
9.9 |
CRITICAL
Network
|
anchore
|
engine
|
In Anchore Engine version 0.7.0, a specially crafted container image manifest, fetched from a registry, can be used to trigger a shell escape flaw in the anchore engine analyzer service during an ima…
|
NVD-CWE-Other
|
CVE-2020-11075
|
2024-11-21 13:56 |
2020-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209928
|
7.5 |
HIGH
Network
|
aegir_project
|
aegir
|
In AEgir greater than or equal to 21.7.0 and less than 21.10.1, aegir publish and aegir build may leak secrets from environment variables in the browser bundle published to npm. This has been fixed i…
|
CWE-200
Information Exposure
|
CVE-2020-11059
|
2024-11-21 13:56 |
2020-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209929
|
7.8 |
HIGH
Local
|
sympa
fedoraproject
debian
canonical
|
sympa
fedora
debian_linux
ubuntu_linux
|
Sympa before 6.2.56 allows privilege escalation.
|
CWE-269
Improper Privilege Management
|
CVE-2020-10936
|
2024-11-21 13:56 |
2020-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209930
|
6.1 |
MEDIUM
Network
|
centreon
|
centreon_host-monitoring_widget
centreon_tactical-overview_widget
centreon_service-monitoring_widget
|
Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the page parameter to service-monitoring/src/index.php. This vulnerability is fixed in vers…
|
CWE-79
Cross-site Scripting
|
CVE-2020-10946
|
2024-11-21 13:56 |
2020-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
