|
211421
|
8.1 |
HIGH
Network
|
bt_ctroms_terminal_project
|
bt_ctroms_terminal
|
An issue was discovered in BT CTROMS Terminal OS Port Portal CT-464. Account takeover can occur because the password-reset feature discloses the verification token. Upon a getverificationcode.jsp req…
|
CWE-319 CWE-522
Cleartext Transmission of Sensitive Information Insufficiently Protected Credentials
|
CVE-2020-14930
|
2024-11-21 14:04 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211422
|
7.5 |
HIGH
Network
|
alpine_project fedoraproject debian
|
alpine fedora debian_linux
|
Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure behavior than the alternative of closing the…
|
NVD-CWE-Other
|
CVE-2020-14929
|
2024-11-21 14:04 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211423
|
4.8 |
MEDIUM
Network
|
naviwebs
|
navigate_cms
|
Navigate CMS 2.9 allows XSS via the Alias or Real URL field of the "Web Sites > Create > Aliases > Add" screen.
|
CWE-79
Cross-site Scripting
|
CVE-2020-14927
|
2024-11-21 14:04 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211424
|
5.4 |
MEDIUM
Network
|
cmsmadesimple
|
cms_made_simple
|
CMS Made Simple 2.2.14 allows XSS via a Search Term to the admin/moduleinterface.php?mact=ModuleManager page.
|
CWE-79
Cross-site Scripting
|
CVE-2020-14926
|
2024-11-21 14:04 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211425
|
3.2 |
LOW
Local
|
qemu fedoraproject redhat
|
qemu fedora extra_packages_for_enterprise_linux enterprise_linux openstack_platform
|
An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the …
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2020-14394
|
2024-11-21 14:03 |
2022-08-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211426
|
5.6 |
MEDIUM
Local
|
redhat
|
jboss_a-mq
|
A flaw was found in Red Hat AMQ Broker in a way that a XEE attack can be done via Broker's configuration files, leading to denial of service and information disclosure.
|
CWE-611
XXE
|
CVE-2020-14379
|
2024-11-21 14:03 |
2022-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211427
|
7.5 |
HIGH
Network
|
moodle
|
moodle
|
In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, yui_combo needed to limit the amount of files it can load to help mitigate the risk of denial of service.
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2020-14322
|
2024-11-21 14:03 |
2022-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211428
|
8.8 |
HIGH
Network
|
moodle
|
moodle
|
In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course.
|
CWE-863
Incorrect Authorization
|
CVE-2020-14321
|
2024-11-21 14:03 |
2022-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211429
|
6.1 |
MEDIUM
Network
|
moodle
|
moodle
|
In Moodle before 3.9.1, 3.8.4 and 3.7.7, the filter in the admin task log required extra sanitizing to prevent a reflected XSS risk.
|
CWE-79
Cross-site Scripting
|
CVE-2020-14320
|
2024-11-21 14:03 |
2022-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211430
|
9.8 |
CRITICAL
Network
|
mitsubishielectric
|
m_commdtm-hart gx_works3 gx_works2 gx_logviewer gt_softgot2000 gt_softgot1000 gt_designer3 fr_configurator2 ezsocket data_transfer cw_configurator cpu_module_logging_…
|
Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and e…
|
NVD-CWE-noinfo
|
CVE-2020-14496
|
2024-11-21 14:03 |
2022-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|