|
196511
|
7.4 |
HIGH
Network
|
nextcloud
|
social
|
Missing validation of server certificates for out-going connections in Nextcloud Social < 0.4.0 allowed a man-in-the-middle attack.
|
CWE-295
Improper Certificate Validation
|
CVE-2020-8279
|
2024-11-21 14:38 |
2020-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196512
|
5.3 |
MEDIUM
Network
|
nextcloud
|
social
|
Improper access control in Nextcloud Social app version 0.3.1 allowed to read posts of any user.
|
CWE-863
Incorrect Authorization
|
CVE-2020-8278
|
2024-11-21 14:38 |
2020-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196513
|
7.5 |
HIGH
Network
|
nodejs fedoraproject oracle c-ares_project
|
node.js fedora graalvm retail_xstore_point_of_service jd_edwards_enterpriseone_tools mysql_cluster blockchain_platform c-ares
|
A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions < 15.2.1, < 14.15.1, and < 12.19.1 by getting the appli…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2020-8277
|
2024-11-21 14:38 |
2020-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196514
|
8.8 |
HIGH
Network
|
citrix
|
sd-wan
|
Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8.
|
CWE-78
OS Command
|
CVE-2020-8273
|
2024-11-21 14:38 |
2020-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196515
|
7.5 |
HIGH
Network
|
citrix
|
sd-wan
|
Authentication Bypass resulting in exposure of SD-WAN functionality in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8
|
CWE-287
Improper Authentication
|
CVE-2020-8272
|
2024-11-21 14:38 |
2020-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196516
|
9.8 |
CRITICAL
Network
|
citrix
|
sd-wan
|
Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8
|
CWE-22
Path Traversal
|
CVE-2020-8271
|
2024-11-21 14:38 |
2020-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196517
|
8.8 |
HIGH
Network
|
citrix
|
virtual_apps_and_desktops
|
An unprivileged Windows user on the VDA or an SMB user can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285871 and CTX285872, 7.15 LTSR CU6 ho…
|
CWE-78
OS Command
|
CVE-2020-8270
|
2024-11-21 14:38 |
2020-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196518
|
8.8 |
HIGH
Network
|
citrix
|
xendesktop xenapp virtual_apps_and_desktops
|
An unprivileged Windows user on the VDA can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 …
|
CWE-269
Improper Privilege Management
|
CVE-2020-8269
|
2024-11-21 14:38 |
2020-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196519
|
8.1 |
HIGH
Network
|
nextcloud
|
nextcloud_server
|
Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an attacker to replace the encryption keys.
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2020-8259
|
2024-11-21 14:38 |
2020-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196520
|
4.4 |
MEDIUM
Local
|
nextcloud
|
nextcloud_server
|
Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an attacker to replace the public key to decrypt them later on.
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2020-8152
|
2024-11-21 14:38 |
2020-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|