|
195941
|
6.5 |
MEDIUM
Network
|
mongodb
|
mongodb
|
A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects MongoDB Server v4.4 versions prior to 4.4…
|
NVD-CWE-Other
|
CVE-2020-7928
|
2024-11-21 14:38 |
2020-11-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195942
|
6.5 |
MEDIUM
Network
|
mongodb
|
mongodb
|
A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant in the server selection subsystem. This issue affects MongoD…
|
CWE-755
Improper Handling of Exceptional Conditions
|
CVE-2020-7926
|
2024-11-21 14:38 |
2020-11-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195943
|
7.5 |
HIGH
Network
|
mongodb
|
mongodb
|
Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted request to cause a denial of service…
|
CWE-20
Improper Input Validation
|
CVE-2020-7925
|
2024-11-21 14:38 |
2020-11-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195944
|
7.4 |
HIGH
Network
|
nextcloud
|
social
|
Missing validation of server certificates for out-going connections in Nextcloud Social < 0.4.0 allowed a man-in-the-middle attack.
|
CWE-295
Improper Certificate Validation
|
CVE-2020-8279
|
2024-11-21 14:38 |
2020-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195945
|
5.3 |
MEDIUM
Network
|
nextcloud
|
social
|
Improper access control in Nextcloud Social app version 0.3.1 allowed to read posts of any user.
|
CWE-863
Incorrect Authorization
|
CVE-2020-8278
|
2024-11-21 14:38 |
2020-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195946
|
7.5 |
HIGH
Network
|
nodejs fedoraproject oracle c-ares_project
|
node.js fedora graalvm retail_xstore_point_of_service jd_edwards_enterpriseone_tools mysql_cluster blockchain_platform c-ares
|
A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions < 15.2.1, < 14.15.1, and < 12.19.1 by getting the appli…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2020-8277
|
2024-11-21 14:38 |
2020-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195947
|
8.8 |
HIGH
Network
|
citrix
|
sd-wan
|
Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8.
|
CWE-78
OS Command
|
CVE-2020-8273
|
2024-11-21 14:38 |
2020-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195948
|
7.5 |
HIGH
Network
|
citrix
|
sd-wan
|
Authentication Bypass resulting in exposure of SD-WAN functionality in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8
|
CWE-287
Improper Authentication
|
CVE-2020-8272
|
2024-11-21 14:38 |
2020-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195949
|
9.8 |
CRITICAL
Network
|
citrix
|
sd-wan
|
Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8
|
CWE-22
Path Traversal
|
CVE-2020-8271
|
2024-11-21 14:38 |
2020-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195950
|
8.8 |
HIGH
Network
|
citrix
|
virtual_apps_and_desktops
|
An unprivileged Windows user on the VDA or an SMB user can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285871 and CTX285872, 7.15 LTSR CU6 ho…
|
CWE-78
OS Command
|
CVE-2020-8270
|
2024-11-21 14:38 |
2020-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|