|
197081
|
7.5 |
HIGH
Network
|
gpgme_project
redhat
fedoraproject
|
gpgme
openshift_container_platform
openshift_container_platform_for_ibm_z
openshift_container_platform_for_linuxone
fedora
enterprise_linux_workstation
enterprise_linux_server
en…
|
The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code executi…
|
CWE-416
Use After Free
|
CVE-2020-8945
|
2024-11-21 14:39 |
2020-02-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197082
|
6.1 |
MEDIUM
Network
|
chiyu-t
|
bf-430_firmware
|
Stored XSS was discovered on CHIYU BF-430 232/485 TCP/IP Converter devices before 1.16.00, as demonstrated by the /if.cgi TF_submask field.
|
CWE-79
Cross-site Scripting
|
CVE-2020-8839
|
2024-11-21 14:39 |
2020-02-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197083
|
7.5 |
HIGH
Network
|
iktm
|
bearftp
|
Improper connection handling in the base connection handler in IKTeam BearFTP before v0.3.1 allows a remote attacker to achieve denial of service via a Slowloris approach by sending a large volume of…
|
CWE-20
Improper Input Validation
|
CVE-2020-8815
|
2024-11-21 14:39 |
2020-02-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197084
|
7.3 |
HIGH
Network
|
istio
redhat
|
istio
openshift_service_mesh
|
Istio versions 1.2.10 (End of Life) and prior, 1.3 through 1.3.7, and 1.4 through 1.4.3 allows authentication bypass. The Authentication Policy exact-path matching logic can allow unauthorized access…
|
CWE-287
Improper Authentication
|
CVE-2020-8595
|
2024-11-21 14:39 |
2020-02-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197085
|
6.5 |
MEDIUM
Network
|
misp
|
misp
|
An issue was discovered in MISP before 2.4.121. ACLs for discussion threads were mishandled in app/Controller/ThreadsController.php and app/Model/Thread.php.
|
NVD-CWE-noinfo
|
CVE-2020-8894
|
2024-11-21 14:39 |
2020-02-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197086
|
7.5 |
HIGH
Network
|
misp
|
misp
|
An issue was discovered in MISP before 2.4.121. The Galaxy view contained an incorrectly sanitized search string in app/View/Galaxies/view.ctp.
|
NVD-CWE-noinfo
|
CVE-2020-8893
|
2024-11-21 14:39 |
2020-02-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197087
|
8.1 |
HIGH
Network
|
misp
|
misp
|
An issue was discovered in MISP before 2.4.121. It did not consider the HTTP PUT method when trying to block a brute-force series of invalid requests.
|
NVD-CWE-noinfo
|
CVE-2020-8892
|
2024-11-21 14:39 |
2020-02-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197088
|
5.9 |
MEDIUM
Network
|
misp
|
misp
|
An issue was discovered in MISP before 2.4.121. It did not canonicalize usernames when trying to block a brute-force series of invalid requests.
|
NVD-CWE-noinfo
|
CVE-2020-8891
|
2024-11-21 14:39 |
2020-02-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197089
|
5.9 |
MEDIUM
Network
|
misp
|
misp
|
An issue was discovered in MISP before 2.4.121. It mishandled time skew (between the machine hosting the web server and the machine hosting the database) when trying to block a brute-force series of …
|
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition
|
CVE-2020-8890
|
2024-11-21 14:39 |
2020-02-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197090
|
7.5 |
HIGH
Network
|
xnau
|
participants_database
|
participants-database.php in the Participants Database plugin 1.9.5.5 and previous versions for WordPress has a time-based SQL injection vulnerability via the ascdesc, list_filter_count, or sortBy pa…
|
CWE-89
SQL Injection
|
CVE-2020-8596
|
2024-11-21 14:39 |
2020-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
