|
210911
|
6.5 |
MEDIUM
Network
|
jetbrains
|
teamcity
|
In JetBrains TeamCity before 2019.2.1, a user without appropriate permissions was able to import settings from the settings.kts file.
|
CWE-276
Incorrect Default Permissions
|
CVE-2020-11689
|
2024-11-21 13:58 |
2020-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210912
|
7.5 |
HIGH
Network
|
jetbrains
|
teamcity
|
In JetBrains TeamCity before 2019.2.1, the application state is kept alive after a user ends his session.
|
CWE-613
Insufficient Session Expiration
|
CVE-2020-11688
|
2024-11-21 13:58 |
2020-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210913
|
7.5 |
HIGH
Network
|
jetbrains
|
teamcity
|
In JetBrains TeamCity before 2019.2.2, password values were shown in an unmasked format on several pages.
|
CWE-200
Information Exposure
|
CVE-2020-11687
|
2024-11-21 13:58 |
2020-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210914
|
2.7 |
LOW
Network
|
jetbrains
|
teamcity
|
In JetBrains TeamCity before 2019.1.4, a project administrator was able to retrieve some TeamCity server settings.
|
NVD-CWE-noinfo
|
CVE-2020-11686
|
2024-11-21 13:58 |
2020-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210915
|
7.5 |
HIGH
Network
|
jetbrains
|
goland
|
In JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS.
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2020-11685
|
2024-11-21 13:58 |
2020-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210916
|
8.1 |
HIGH
Adjacent
|
titan
|
sf_rush_smart_band_firmware
|
An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pairing (mode 0 Bluetooth LE security level) The data being transmitted over the a…
|
CWE-347 CWE-306 CWE-319
Improper Verification of Cryptographic Signature Missing Authentication for Critical Function Cleartext Transmission of Sensitive Information
|
CVE-2020-11539
|
2024-11-21 13:58 |
2020-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210917
|
5.3 |
MEDIUM
Network
|
joomla
|
joomla\!
|
An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of com_users allow the unauthorized editing of usergroups.
|
NVD-CWE-noinfo
|
CVE-2020-11891
|
2024-11-21 13:58 |
2020-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210918
|
5.3 |
MEDIUM
Network
|
joomla
|
joomla\!
|
An issue was discovered in Joomla! before 3.9.17. Improper input validations in the usergroup table class could lead to a broken ACL configuration.
|
CWE-20
Improper Input Validation
|
CVE-2020-11890
|
2024-11-21 13:58 |
2020-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210919
|
5.3 |
MEDIUM
Network
|
joomla
|
joomla\!
|
An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of com_users allow the unauthorized deletion of usergroups.
|
NVD-CWE-noinfo
|
CVE-2020-11889
|
2024-11-21 13:58 |
2020-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210920
|
7.5 |
HIGH
Network
|
oppo
|
coloros
|
In ColorOS (oppo mobile phone operating system, based on AOSP frameworks/native code position/services/surfaceflinger surfaceflinger.CPP), RGB is defined on the stack but uninitialized, so when the s…
|
CWE-908
Use of Uninitialized Resource
|
CVE-2020-11828
|
2024-11-21 13:58 |
2020-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|