|
209431
|
2.1 |
LOW
Physics
|
philips
|
suresigns_vs4_firmware
|
Philips SureSigns VS4, A.07.107 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely …
|
CWE-20
Improper Input Validation
|
CVE-2020-16237
|
2024-11-21 14:07 |
2020-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209432
|
8.8 |
HIGH
Local
|
rangee
|
rangeeos
|
In the default configuration of Rangee GmbH RangeeOS 8.0.4, all components are executed in the context of the privileged root user. This may allow a local attacker to break out of the restricted envi…
|
CWE-78
OS Command
|
CVE-2020-16282
|
2024-11-21 14:07 |
2020-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209433
|
7.8 |
HIGH
Local
|
rangee
|
rangeeos
|
The Kommbox component in Rangee GmbH RangeeOS 8.0.4 could allow a local authenticated attacker to escape from the restricted environment and execute arbitrary code due to unrestricted context menus b…
|
CWE-116
Improper Encoding or Escaping of Output
|
CVE-2020-16281
|
2024-11-21 14:07 |
2020-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209434
|
5.5 |
MEDIUM
Local
|
rangee
|
rangeeos
|
Multiple Rangee GmbH RangeeOS 8.0.4 modules store credentials in plaintext including credentials of users for several external facing administrative services, domain joined users, and local administr…
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2020-16280
|
2024-11-21 14:07 |
2020-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209435
|
9.8 |
CRITICAL
Network
|
rangee
|
rangeeos
|
The Kommbox component in Rangee GmbH RangeeOS 8.0.4 is vulnerable to Remote Code Execution due to untrusted user supplied input being passed to the command line without sanitization.
|
CWE-78
OS Command
|
CVE-2020-16279
|
2024-11-21 14:07 |
2020-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209436
|
5.5 |
MEDIUM
Local
|
artifex debian canonical
|
ghostscript debian_linux ubuntu_linux
|
A division by zero vulnerability in dot24_print_page() in devices/gdevdm24.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This i…
|
CWE-369
Divide By Zero
|
CVE-2020-16310
|
2024-11-21 14:07 |
2020-08-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209437
|
5.5 |
MEDIUM
Local
|
artifex debian canonical
|
ghostscript debian_linux ubuntu_linux
|
A buffer overflow vulnerability in lxm5700m_print_page() in devices/gdevlxm.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted eps file. This …
|
CWE-787
Out-of-bounds Write
|
CVE-2020-16309
|
2024-11-21 14:07 |
2020-08-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209438
|
5.5 |
MEDIUM
Local
|
artifex debian canonical
|
ghostscript debian_linux ubuntu_linux
|
A buffer overflow vulnerability in p_print_image() in devices/gdevcdj.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fix…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-16308
|
2024-11-21 14:07 |
2020-08-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209439
|
5.5 |
MEDIUM
Local
|
artifex debian canonical
|
ghostscript debian_linux ubuntu_linux
|
A null pointer dereference vulnerability in devices/vector/gdevtxtw.c and psi/zbfont.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted postsc…
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-16307
|
2024-11-21 14:07 |
2020-08-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209440
|
5.5 |
MEDIUM
Local
|
artifex debian canonical
|
ghostscript debian_linux ubuntu_linux
|
A null pointer dereference vulnerability in devices/gdevtsep.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted postscript file. This is fixed…
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-16306
|
2024-11-21 14:07 |
2020-08-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|