|
207871
|
5.3 |
MEDIUM
Network
|
hcltech
|
hcl_nomad
|
"If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms will communicate in clear text and does not currently have a user interface option to change the settin…
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2020-4092
|
2024-11-21 14:32 |
2020-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
207872
|
5.4 |
MEDIUM
Network
|
ibm
|
spectrum_protect_plus
|
IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequen…
|
CWE-22
Path Traversal
|
CVE-2020-4209
|
2024-11-21 14:32 |
2020-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
207873
|
9.3 |
CRITICAL
Network
|
vmware
|
esxi
|
ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML when viewing virtual machines attributes. VMware has evaluat…
|
CWE-79
Cross-site Scripting
|
CVE-2020-3955
|
2024-11-21 14:32 |
2020-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
207874
|
4.3 |
MEDIUM
Network
|
ibm
|
websphere_application_server
|
IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated attacker to obtain sensitive information, caused by improper parameter ch…
|
NVD-CWE-noinfo
|
CVE-2020-4329
|
2024-11-21 14:32 |
2020-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
207875
|
6.5 |
MEDIUM
Network
|
ibm
|
mq
mq_appliance
|
IBM MQ and MQ Appliance 8.0, 9.1 LTS, and 9.1 CD could allow an authenticated user cause a denial of service due to a memory leak. IBM X-Force ID: 175840.
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2020-4267
|
2024-11-21 14:32 |
2020-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
207876
|
9.8 |
CRITICAL
Network
|
ibm
|
spectrum_protect
|
IBM Spectrum Protect 7.1 and 8.1 server is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. This could allow a remote attacker to execute arbitrary code on the system …
|
CWE-20
CWE-787
Improper Input Validation
Out-of-bounds Write
|
CVE-2020-4415
|
2024-11-21 14:32 |
2020-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
207877
|
4.6 |
MEDIUM
Physics
|
ibm
|
maas360
|
IBM MaaS360 6.82 could allow a user with pysical access to the device to crash the application which may enable the user to access restricted applications and device settings. IBM X-Force ID: 178505.
|
NVD-CWE-noinfo
|
CVE-2020-4353
|
2024-11-21 14:32 |
2020-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
207878
|
7.0 |
HIGH
Local
|
ibm
|
tivoli_monitoring
|
IBM Tivoli Monitoring 6.3.0 could allow a local attacker to execute arbitrary code on the system. By placing a specially crafted file, an attacker could exploit this vulnerability to load other DLL f…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2020-4311
|
2024-11-21 14:32 |
2020-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
207879
|
8.8 |
HIGH
Network
|
ibm
|
urbancode_deploy
|
IBM UrbanCode Deploy (UCD) 7.0.3.0 and 7.0.4.0 could allow an authenticated user to impersonate another user if the server is configured to enable Distributed Front End (DFE). IBM X-Force ID: 174955.
|
NVD-CWE-noinfo
|
CVE-2020-4202
|
2024-11-21 14:32 |
2020-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
207880
|
6.5 |
MEDIUM
Network
|
hcltech
|
connections
|
"HCL Connections is vulnerable to possible information leakage and could disclose sensitive information via stack trace to a local user."
|
CWE-209
Information Exposure Through an Error Message
|
CVE-2020-4085
|
2024-11-21 14:32 |
2020-04-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
