|
211121
|
6.5 |
MEDIUM
Adjacent
|
silabs
|
uzb-7 700_series_firmware
|
Z-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate or encrypt FIND_NODE_IN_RANGE frames, allowing a remote, unauthenticated attacker to inject a FIND_NOD…
|
CWE-345
Insufficient Verification of Data Authenticity
|
CVE-2020-10137
|
2024-11-21 13:54 |
2022-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211122
|
5.5 |
MEDIUM
Local
|
siemens
|
simatic_rtls_locating_manager
|
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12). The affected application does not properly handle the import of large configuration files. A local attacke…
|
NVD-CWE-noinfo
|
CVE-2020-10054
|
2024-11-21 13:54 |
2021-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211123
|
5.5 |
MEDIUM
Local
|
siemens
|
simatic_rtls_locating_manager
|
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12). The affected application writes sensitive data, such as database credentials in configuration files. A loc…
|
-
|
CVE-2020-10053
|
2024-11-21 13:54 |
2021-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211124
|
5.5 |
MEDIUM
Local
|
siemens
|
simatic_rtls_locating_manager
|
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12). The affected application writes sensitive data, such as usernames and passwords in log files. A local atta…
|
-
|
CVE-2020-10052
|
2024-11-21 13:54 |
2021-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211125
|
6.5 |
MEDIUM
Network
|
apple
|
macos
|
A resource exhaustion issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. An attacker in a privileged network position may be able to perform denial of se…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2020-10005
|
2024-11-21 13:54 |
2021-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211126
|
7.8 |
HIGH
Local
|
adobe
|
coldfusion
|
The Adobe ColdFusion installer fails to set a secure access-control list (ACL) on the default installation directory, such as C:\ColdFusion2021\. By default, unprivileged users can create files in th…
|
CWE-276
Incorrect Default Permissions
|
CVE-2020-10145
|
2024-11-21 13:54 |
2021-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211127
|
5.3 |
MEDIUM
Local
|
zephyrproject
|
zephyr
|
Improper Handling of Insufficient Permissions or Privileges in zephyr. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Insufficient Permissions or Privileges (CWE-280). For more in…
|
NVD-CWE-Other
|
CVE-2020-10072
|
2024-11-21 13:54 |
2021-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211128
|
6.5 |
MEDIUM
Adjacent
|
zephyrproject
|
zephyr
|
Zephyr Bluetooth unchecked packet data results in denial of service. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Parameters (CWE-233). For more information, see https://github.…
|
NVD-CWE-Other
|
CVE-2020-10069
|
2024-11-21 13:54 |
2021-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211129
|
5.7 |
MEDIUM
Adjacent
|
zephyrproject
|
zephyr
|
Incorrect Error Handling in Bluetooth HCI core. Zephyr versions >= v1.14.2, >= v2.2.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephy…
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-10066
|
2024-11-21 13:54 |
2021-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211130
|
8.8 |
HIGH
Adjacent
|
zephyrproject
|
zephyr
|
Missing Size Checks in Bluetooth HCI over SPI. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Length Parameter Inconsistency (CWE-130). For more information, see https://github.co…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-10065
|
2024-11-21 13:54 |
2021-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|