|
197771
|
7.5 |
HIGH
Network
|
aquaforest
|
tiff_server
|
Aquaforest TIFF Server 4.0 allows Unauthenticated Arbitrary File Download.
|
CWE-22 CWE-306
Path Traversal Missing Authentication for Critical Function
|
CVE-2020-9325
|
2024-11-21 14:40 |
2020-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197772
|
7.5 |
HIGH
Network
|
aquaforest
|
tiff_server
|
Aquaforest TIFF Server 4.0 allows Unauthenticated SMB Hash Capture via UNC.
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2020-9324
|
2024-11-21 14:40 |
2020-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197773
|
5.3 |
MEDIUM
Network
|
aquaforest
|
tiff_server
|
Aquaforest TIFF Server 4.0 allows Unauthenticated File and Directory Enumeration via tiffserver/tssp.aspx.
|
CWE-22
Path Traversal
|
CVE-2020-9323
|
2024-11-21 14:40 |
2020-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197774
|
6.1 |
MEDIUM
Network
|
zulipchat
|
zulip_desktop
|
Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be exploited for XSS in a number of ways. This especially affects Zulip Desktop 2.3.82.
|
CWE-79
Cross-site Scripting
|
CVE-2020-9443
|
2024-11-21 14:40 |
2020-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197775
|
9.8 |
CRITICAL
Network
|
zohocorp
|
manageengine_password_manager_pro
|
Zoho ManageEngine Password Manager Pro through 10.x has a CSV Excel Macro Injection vulnerability via a crafted name that is mishandled by the Export Passwords feature. NOTE: the vendor disputes the …
|
CWE-1236
Improper Neutralization of Formula Elements in a CSV File
|
CVE-2020-9347
|
2024-11-21 14:40 |
2020-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197776
|
8.8 |
HIGH
Network
|
zohocorp
|
manageengine_password_manager_pro
|
Zoho ManageEngine Password Manager Pro 10.4 and prior has no protection against Cross-site Request Forgery (CSRF) attacks, as demonstrated by changing a user's role.
|
CWE-352
Origin Validation Error
|
CVE-2020-9346
|
2024-11-21 14:40 |
2020-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197777
|
6.5 |
MEDIUM
Network
|
umbraco
|
umbraco_cms
|
Umbraco CMS 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Package functionality.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-9472
|
2024-11-21 14:40 |
2020-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197778
|
8.8 |
HIGH
Network
|
umbraco
|
umbraco_cms
|
Umbraco Cloud 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Packages functionality.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-9471
|
2024-11-21 14:40 |
2020-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197779
|
7.5 |
HIGH
Network
|
traefik
|
traefik
|
configurationwatcher.go in Traefik 2.x before 2.1.4 and TraefikEE 2.0.0 mishandles the purging of certificate contents from providers before logging.
|
CWE-295
Improper Certificate Validation
|
CVE-2020-9321
|
2024-11-21 14:40 |
2020-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197780
|
5.3 |
MEDIUM
Network
|
microfocus
|
service_manager
|
Login filter can access configuration files vulnerability in Micro Focus Service Manager (Web Tier), affecting versions 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to all…
|
NVD-CWE-noinfo
|
CVE-2020-9518
|
2024-11-21 14:40 |
2020-03-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|