|
197551
|
7.8 |
HIGH
Local
|
trendmicro
|
vulnerability_protection
|
Trend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an attack to use the product installer to load other DLL files located in the same directory.
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2020-8601
|
2024-11-21 14:39 |
2020-02-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197552
|
9.8 |
CRITICAL
Network
|
arista
|
dcs-7050qx-32s-r_firmware dcs-7050cx3-32s-r_firmware dcs-7280sram-48c6-r_firmware
|
Arista DCS-7050QX-32S-R 4.20.9M, DCS-7050CX3-32S-R 4.20.11M, and DCS-7280SRAM-48C6-R 4.22.0.1F devices (and possibly other products) allow attackers to bypass intended TACACS+ shell restrictions via …
|
NVD-CWE-noinfo
|
CVE-2020-9015
|
2024-11-21 14:39 |
2020-02-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197553
|
5.4 |
MEDIUM
Network
|
machothemes
|
modula_image_gallery
|
A stored XSS vulnerability exists in the Modula Image Gallery plugin before 2.2.5 for WordPress. Successful exploitation of this vulnerability would allow an authenticated low-privileged user to inje…
|
CWE-79
Cross-site Scripting
|
CVE-2020-9003
|
2024-11-21 14:39 |
2020-02-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197554
|
9.1 |
CRITICAL
Network
|
western_digital
|
my_cloud_home ibi
|
Western Digital My Cloud Home before 3.6.0 and ibi before 3.6.0 allow Session Fixation.
|
CWE-384
Session Fixation
|
CVE-2020-8990
|
2024-11-21 14:39 |
2020-02-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197555
|
7.8 |
HIGH
Local
|
westerndigital
|
westerndigitalssddashboardsetup.exe sandiskssddashboardsetup.exe
|
Western Digital WesternDigitalSSDDashboardSetup.exe before 3.0.2.0 allows DLL Hijacking.
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2020-8959
|
2024-11-21 14:39 |
2020-02-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197556
|
5.4 |
MEDIUM
Network
|
hitrontech
|
coda-4582u_firmware
|
Hitron CODA-4582U 7.1.1.30 devices allow XSS via a Managed Device name on the Wireless > Access Control > Add Managed Device screen.
|
CWE-79
Cross-site Scripting
|
CVE-2020-8824
|
2024-11-21 14:39 |
2020-02-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197557
|
5.3 |
MEDIUM
Network
|
synacor
|
zimbra_collaboration_suite
|
An issue was discovered in Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7. When grantors revoked a shared calendar in Outlook, the calendar stayed mounted and accessible.
|
CWE-281
Improper Preservation of Permissions
|
CVE-2020-8633
|
2024-11-21 14:39 |
2020-02-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197558
|
9.4 |
CRITICAL
Network
|
phoenixcontact
|
ilc_2050_bi_firmware ilc_2050_bi-l_firmware
|
An issue was discovered on Phoenix Contact Emalytics Controller ILC 2050 BI before 1.2.3 and BI-L before 1.2.3 devices. There is an insecure mechanism for read and write access to the configuration o…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2020-8768
|
2024-11-21 14:39 |
2020-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197559
|
8.8 |
HIGH
Network
|
wpcentral
|
wpcentral
|
The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key.
|
CWE-200
Information Exposure
|
CVE-2020-9043
|
2024-11-21 14:39 |
2020-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197560
|
5.4 |
MEDIUM
Network
|
joplin_project
|
joplin
|
Joplin through 1.0.184 allows Arbitrary File Read via XSS.
|
CWE-79
Cross-site Scripting
|
CVE-2020-9038
|
2024-11-21 14:39 |
2020-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|