|
197381
|
9.8 |
CRITICAL
Network
|
freebsd
|
freebsd
|
In FreeBSD 12.1-STABLE before r357213, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r357214, and 11.3-RELEASE before 11.3-RELEASE-p6, URL handling in …
|
CWE-787
Out-of-bounds Write
|
CVE-2020-7450
|
2024-11-21 14:37 |
2020-02-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197382
|
8.8 |
HIGH
Network
|
codecov
|
codecov
|
codecov-node npm module before 3.6.5 allows remote attackers to execute arbitrary commands.The value provided as part of the gcov-root argument is executed by the exec function within lib/codecov.js.…
|
CWE-78
OS Command
|
CVE-2020-7597
|
2024-11-21 14:37 |
2020-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197383
|
9.8 |
CRITICAL
Network
|
djangoproject
|
django
|
Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter (e.g., in Django applications that offer downloads of data …
|
CWE-89
SQL Injection
|
CVE-2020-7471
|
2024-11-21 14:37 |
2020-02-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197384
|
6.1 |
MEDIUM
Network
|
jetbrains
|
youtrack
|
JetBrains YouTrack 2019.2 before 2019.2.59309 was vulnerable to XSS via an issue description.
|
CWE-79
Cross-site Scripting
|
CVE-2020-7913
|
2024-11-21 14:37 |
2020-01-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197385
|
5.3 |
MEDIUM
Network
|
jetbrains
|
youtrack
|
In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups.
|
CWE-668
Exposure of Resource to Wrong Sphere
|
CVE-2020-7912
|
2024-11-21 14:37 |
2020-01-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197386
|
6.1 |
MEDIUM
Network
|
jetbrains
|
teamcity
|
In JetBrains TeamCity before 2019.2, several user-level pages were vulnerable to XSS.
|
CWE-79
Cross-site Scripting
|
CVE-2020-7911
|
2024-11-21 14:37 |
2020-01-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197387
|
5.4 |
MEDIUM
Network
|
jetbrains
|
teamcity
|
JetBrains TeamCity before 2019.2 was vulnerable to a stored XSS attack by a user with the developer role.
|
CWE-79
Cross-site Scripting
|
CVE-2020-7910
|
2024-11-21 14:37 |
2020-01-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197388
|
7.5 |
HIGH
Network
|
jetbrains
|
teamcity
|
In JetBrains TeamCity before 2019.1.5, some server-stored passwords could be shown via the web UI.
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2020-7909
|
2024-11-21 14:37 |
2020-01-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197389
|
4.3 |
MEDIUM
Network
|
jetbrains
|
teamcity
|
In JetBrains TeamCity before 2019.1.5, reverse tabnabbing was possible on several pages.
|
CWE-269
Improper Privilege Management
|
CVE-2020-7908
|
2024-11-21 14:37 |
2020-01-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197390
|
7.5 |
HIGH
Network
|
jetbrains
|
rider
|
In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer. This issue was fixed in release version 2019.3.
|
CWE-347
Improper Verification of Cryptographic Signature
|
CVE-2020-7906
|
2024-11-21 14:37 |
2020-01-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|