|
196171
|
8.8 |
HIGH
Adjacent
|
intel
|
server_board_s2600wt_firmware server_system_r1000wt_firmware server_system_r2000wt_firmware server_board_s2600cw compute_module_hns2600kp_firmware server_board_s2600kp_firmware comp…
|
Improper authentication in socket services for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow an unauthenticated user to potentially enable escalation o…
|
CWE-287
Improper Authentication
|
CVE-2020-8709
|
2024-11-21 14:39 |
2020-08-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196172
|
8.8 |
HIGH
Adjacent
|
intel
|
server_board_s2600wt_firmware server_system_r1000wt_firmware server_system_r2000wt_firmware server_board_s2600cw compute_module_hns2600kp_firmware server_board_s2600kp_firmware comp…
|
Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adj…
|
CWE-287
Improper Authentication
|
CVE-2020-8708
|
2024-11-21 14:39 |
2020-08-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196173
|
8.8 |
HIGH
Adjacent
|
intel
|
server_board_s2600wt_firmware server_system_r1000wt_firmware server_system_r2000wt_firmware server_board_s2600cw compute_module_hns2600kp_firmware server_board_s2600kp_firmware comp…
|
Buffer overflow in daemon for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via a…
|
CWE-120
Classic Buffer Overflow
|
CVE-2020-8707
|
2024-11-21 14:39 |
2020-08-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196174
|
8.8 |
HIGH
Adjacent
|
intel
|
server_board_s2600wt_firmware server_system_r1000wt_firmware server_system_r2000wt_firmware server_board_s2600cw compute_module_hns2600kp_firmware server_board_s2600kp_firmware comp…
|
Buffer overflow in a daemon for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via…
|
CWE-120
Classic Buffer Overflow
|
CVE-2020-8706
|
2024-11-21 14:39 |
2020-08-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196175
|
9.6 |
CRITICAL
Network
|
google
|
asylo
|
An arbitrary memory overwrite vulnerability in the trusted memory of Asylo exists in versions prior to 0.6.0. As the ecall_restore function fails to validate the range of the output_len pointer, an a…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2020-8904
|
2024-11-21 14:39 |
2020-08-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196176
|
6.5 |
MEDIUM
Network
|
google
|
asylo
|
A buffer length validation vulnerability in Asylo versions prior to 0.6.0 allows an attacker to read data they should not have access to. The 'enc_untrusted_recvfrom' function generates a return valu…
|
CWE-120
Classic Buffer Overflow
|
CVE-2020-8905
|
2024-11-21 14:39 |
2020-08-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196177
|
8.8 |
HIGH
Network
|
android
|
play_core_library
|
A local, arbitrary code execution vulnerability exists in the SplitCompat.install endpoint in Android's Play Core Library versions prior to 1.7.2. A malicious attacker could create an apk which targe…
|
CWE-22
Path Traversal
|
CVE-2020-8913
|
2024-11-21 14:39 |
2020-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196178
|
2.5 |
LOW
Local
|
amazon
|
aws_s3_crypto_sdk
|
A vulnerability in the in-band key negotiation exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. An attacker with write access to the targeted bucket can change the encryption algorith…
|
CWE-327
Use of a Broken or Risky Cryptographic Algorithm
|
CVE-2020-8912
|
2024-11-21 14:39 |
2020-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196179
|
5.6 |
MEDIUM
Local
|
amazon
|
aws_s3_crypto_sdk
|
A padding oracle vulnerability exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. The SDK allows users to encrypt files with AES-CBC without computing a Message Authentication Code (MAC…
|
CWE-327
Use of a Broken or Risky Cryptographic Algorithm
|
CVE-2020-8911
|
2024-11-21 14:39 |
2020-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196180
|
7.1 |
HIGH
Local
|
google
|
go-tpm
|
An improperly initialized 'migrationAuth' value in Google's go-tpm TPM1.2 library versions prior to 0.3.0 can lead an eavesdropping attacker to discover the auth value for a key created with CreateWr…
|
CWE-665
Improper Initialization
|
CVE-2020-8918
|
2024-11-21 14:39 |
2020-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|