|
208481
|
5.5 |
MEDIUM
Local
|
intel
netapp
siemens
|
bios
cloud_backup
hci_storage_node_bios
solidfire_bios
hci_compute_node_bios
aff_bios
fas_bios
e-series_bios
simatic_ipc547g_firmware
|
Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access.
|
CWE-20
Improper Input Validation
|
CVE-2020-24486
|
2024-11-21 14:14 |
2021-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208482
|
8.8 |
HIGH
Network
|
ffmpeg
|
ffmpeg
|
Buffer Overflow vulnerability in FFMpeg 4.2.3 in dnn_execute_layer_pad in libavfilter/dnn/dnn_backend_native_layer_pad.c due to a call to memcpy without length checks, which could let a remote malici…
|
CWE-120
Classic Buffer Overflow
|
CVE-2020-24020
|
2024-11-21 14:14 |
2021-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208483
|
7.5 |
HIGH
Network
|
phpyun
|
phpyun
|
An information disclosure vulnerability was discovered in alipay_function.php in the log file of Alibaba payment interface on PHPPYUN prior to version 5.0.1. If exploited, this vulnerability will all…
|
NVD-CWE-noinfo
|
CVE-2020-23768
|
2024-11-21 14:14 |
2021-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208484
|
6.5 |
MEDIUM
Network
|
htmly
|
htmly
|
An arbitrary file deletion vulnerability was discovered on htmly v2.7.5 which allows remote attackers to use any absolute path to delete any file in the server should they gain Administrator privileg…
|
CWE-22
Path Traversal
|
CVE-2020-23766
|
2024-11-21 14:14 |
2021-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208485
|
7.2 |
HIGH
Network
|
bludit
|
bludit
|
A file upload vulnerability was discovered in the file path /bl-plugins/backup/plugin.php on Bludit version 3.12.0. If an attacker is able to gain Administrator rights they will be able to use unsafe…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-23765
|
2024-11-21 14:14 |
2021-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208486
|
7.5 |
HIGH
Network
|
hom.ee
|
brain_cube_core
|
homee Brain Cube v2 (2.28.2 and 2.28.4) devices have sensitive SSH keys within downloadable and unencrypted firmware images. This allows remote attackers to use the support server as a SOCKS proxy.
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2020-24396
|
2024-11-21 14:14 |
2021-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208487
|
6.8 |
MEDIUM
Physics
|
hom.ee
|
brain_cube_core
|
The USB firmware update script of homee Brain Cube v2 (2.28.2 and 2.28.4) devices allows an attacker with physical access to install compromised firmware. This occurs because of insufficient validati…
|
CWE-345
Insufficient Verification of Data Authenticity
|
CVE-2020-24395
|
2024-11-21 14:14 |
2021-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208488
|
5.5 |
MEDIUM
Local
|
gnu
|
libredwg
|
A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the read_system_page function at libredwg-0.10.1/src/decode_r2007.c:666:5, which causes a denial of service by submitting a dw…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-23861
|
2024-11-21 14:14 |
2021-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208489
|
6.1 |
MEDIUM
Network
|
tinyshop_project
|
tinyshop
|
TinyShop, a free and open source mall based on RageFrame2, has a stored XSS vulnerability that affects version 1.2.0. TinyShop allows XSS via the explain_first and again_explain parameters of the /ev…
|
CWE-79
Cross-site Scripting
|
CVE-2020-24026
|
2024-11-21 14:14 |
2021-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208490
|
5.5 |
MEDIUM
Local
|
gnu
fedoraproject
|
cflow
fedora
|
Use-after-Free vulnerability in cflow 1.6 in the void call(char *name, int line) function at src/parser.c, which could cause a denial of service via the pointer variable caller->callee.
|
CWE-416
Use After Free
|
CVE-2020-23856
|
2024-11-21 14:14 |
2021-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
