|
210091
|
8.1 |
HIGH
Network
|
fasterxml
debian
netapp
oracle
|
jackson-databind
debian_linux
steelstore_cloud_integrated_storage
active_iq_unified_manager
retail_xstore_point_of_service
primavera_unifier
weblogic_server
retail_merchandising_…
|
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jelly.impl.Embedded (aka commons-jelly).
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2020-11620
|
2024-11-21 13:58 |
2020-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210092
|
8.1 |
HIGH
Network
|
fasterxml
debian
netapp
oracle
|
jackson-databind
debian_linux
steelstore_cloud_integrated_storage
active_iq_unified_manager
retail_xstore_point_of_service
primavera_unifier
weblogic_server
retail_merchandising_…
|
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2020-11619
|
2024-11-21 13:58 |
2020-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210093
|
6.1 |
MEDIUM
Network
|
wpleadplus
|
wp_lead_plus_x
|
An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows remote attackers to upload page templates containing arbitrary JavaScript via the c37_wpl_import_template admin-pos…
|
CWE-79
Cross-site Scripting
|
CVE-2020-11509
|
2024-11-21 13:58 |
2020-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210094
|
5.4 |
MEDIUM
Network
|
wpleadplus
|
wp_lead_plus_x
|
An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows logged-in users with minimal permissions to create or replace existing pages with a malicious page containing arbit…
|
CWE-79
Cross-site Scripting
|
CVE-2020-11508
|
2024-11-21 13:58 |
2020-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210095
|
7.5 |
HIGH
Network
|
netty
debian
fedoraproject
netapp
oracle
|
netty
debian_linux
fedora
oncommand_workflow_automation
oncommand_insight
oncommand_api_services
webcenter_portal
nosql_database
communications_messaging_server
communicati…
|
The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty serve…
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2020-11612
|
2024-11-21 13:58 |
2020-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210096
|
6.1 |
MEDIUM
Network
|
cross_domain_local_storage_project
|
cross_domain_local_storage
|
An issue was discovered in xdLocalStorage through 2.0.5. The buildMessage() function in xdLocalStorage.js specifies the wildcard (*) as the targetOrigin when calling the postMessage() function on the…
|
CWE-601
Open Redirect
|
CVE-2020-11611
|
2024-11-21 13:58 |
2020-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210097
|
8.8 |
HIGH
Network
|
cross_domain_local_storage_project
|
cross_domain_local_storage
|
An issue was discovered in xdLocalStorage through 2.0.5. The postData() function in xdLocalStoragePostMessageApi.js specifies the wildcard (*) as the targetOrigin when calling the postMessage() funct…
|
CWE-668
Exposure of Resource to Wrong Sphere
|
CVE-2020-11610
|
2024-11-21 13:58 |
2020-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210098
|
4.3 |
MEDIUM
Physics
|
linux
canonical
|
linux_kernel
ubuntu_linux
|
An issue was discovered in the stv06xx subsystem in the Linux kernel before 5.6.1. drivers/media/usb/gspca/stv06xx/stv06xx.c and drivers/media/usb/gspca/stv06xx/stv06xx_pb0100.c mishandle invalid des…
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-11609
|
2024-11-21 13:58 |
2020-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210099
|
7.8 |
HIGH
Local
|
nchsoftware
|
express_invoice
|
NCH Express Invoice 7.25 allows local users to discover the cleartext password by reading the configuration file.
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2020-11560
|
2024-11-21 13:58 |
2020-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210100
|
6.1 |
MEDIUM
Network
|
rankmath
|
seo
|
The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to create new URIs (that redirect to an external web site) via the unsecured rankmath/v1/updateRedirection …
|
CWE-601
Open Redirect
|
CVE-2020-11515
|
2024-11-21 13:58 |
2020-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
