|
198541
|
7.5 |
HIGH
Network
|
schneider-electric
|
modicon_m218_firmware
|
Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (V5.0.0.7 and prior) which could cause Denial of Service when sending specific crafted IPV4 packet to the controller: Sending…
|
-
|
CVE-2020-7524
|
2024-11-21 14:37 |
2020-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198542
|
7.8 |
HIGH
Local
|
schneider-electric
|
modbus_driver_suite modbus_serial_driver
|
Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver (see security notification for versions) which could cause local privilege escalation when the Modbus Ser…
|
-
|
CVE-2020-7523
|
2024-11-21 14:37 |
2020-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198543
|
9.8 |
CRITICAL
Network
|
schneider-electric
|
apc_easy_ups_online_software
|
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in SFAPV9601 - APC Easy UPS On-Line Software (V2.0 and earlier) when accessing a vulnerable method …
|
-
|
CVE-2020-7522
|
2024-11-21 14:37 |
2020-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198544
|
9.8 |
CRITICAL
Network
|
schneider-electric
|
apc_easy_ups_online_software
|
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in SFAPV9601 - APC Easy UPS On-Line Software (V2.0 and earlier) when accessing a vulnerable method …
|
-
|
CVE-2020-7521
|
2024-11-21 14:37 |
2020-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198545
|
7.2 |
HIGH
Network
|
joyent oracle
|
json commerce_guided_search timesten_in-memory_database financial_services_regulatory_reporting_with_agilereporter financial_services_crime_and_compliance_management_studio
|
This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function.
|
CWE-78
OS Command
|
CVE-2020-7712
|
2024-11-21 14:37 |
2020-08-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198546
|
4.8 |
MEDIUM
Network
|
mcafee
|
application_and_change_control
|
Cross Site Scripting vulnerability in ePO extension in McAfee Application Control (MAC) prior to 8.3.1 allows administrators to inject arbitrary web script or HTML via specially crafted input in the …
|
CWE-79
Cross-site Scripting
|
CVE-2020-7309
|
2024-11-21 14:37 |
2020-08-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198547
|
6.5 |
MEDIUM
Network
|
ericssonlg
|
ipecs
|
A vulnerability in the web-based management interface of iPECS could allow an authenticated, remote attacker to get administrator permission. The vulnerability is due to insecure permission when hand…
|
CWE-276
Incorrect Default Permissions
|
CVE-2020-7824
|
2024-11-21 14:37 |
2020-08-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198548
|
7.5 |
HIGH
Network
|
rapid7
|
metasploit
|
The Metasploit Framework module "auxiliary/admin/http/telpho10_credential_dump" module is affected by a relative path traversal vulnerability in the untar method which can be exploited to write arbit…
|
CWE-22
Path Traversal
|
CVE-2020-7377
|
2024-11-21 14:37 |
2020-08-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198549
|
9.8 |
CRITICAL
Network
|
rapid7
|
metasploit
|
The Metasploit Framework module "post/osx/gather/enum_osx module" is affected by a relative path traversal vulnerability in the get_keychains method which can be exploited to write arbitrary files to…
|
CWE-22
Path Traversal
|
CVE-2020-7376
|
2024-11-21 14:37 |
2020-08-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198550
|
8.1 |
HIGH
Network
|
mintegral
|
mintegraladsdk
|
This affects the package MintegralAdSDK from 0.0.0. The SDK distributed by the company contains malicious functionality that tracks any URL opened by the app and reports it back to the company, along…
|
CWE-1021
Improper Restriction of Rendered UI Layers or Frames
|
CVE-2020-7705
|
2024-11-21 14:37 |
2020-08-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|