|
199321
|
6.8 |
MEDIUM
Physics
|
hp
|
apollo_2000_firmware apollo_4200_gen10_firmware apollo_4500_firmware proliant_xl230k_gen10_firmware proliant_xl270d_gen10_firmware proliant_bl460c_gen10_firmware proliant_dl120_gen1…
|
A local elevation of privilege using physical access security vulnerability was found in HPE Proliant Gen10 Servers using Intel Innovation Engine (IE). This attack requires a physical attack to the s…
|
NVD-CWE-noinfo
|
CVE-2020-7207
|
2024-11-21 14:36 |
2020-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199322
|
7.2 |
HIGH
Network
|
arubanetworks
|
airwave_glass
|
A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
|
NVD-CWE-noinfo
|
CVE-2020-7129
|
2024-11-21 14:36 |
2020-11-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199323
|
9.8 |
CRITICAL
Network
|
arubanetworks
|
airwave_glass
|
A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2020-7128
|
2024-11-21 14:36 |
2020-11-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199324
|
5.3 |
MEDIUM
Network
|
mozilla
|
firefox
|
When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about the nonce used during signature generation. Given an electro-m…
|
NVD-CWE-noinfo
|
CVE-2020-6829
|
2024-11-21 14:36 |
2020-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199325
|
9.8 |
CRITICAL
Network
|
hp
|
storeserv_management_console
|
SSMC3.7.0.0 is vulnerable to remote authentication bypass. HPE StoreServ Management Console (SSMC) 3.7.0.0 is an off node multiarray manager web application and remains isolated from data on the mana…
|
CWE-287
Improper Authentication
|
CVE-2020-7197
|
2024-11-21 14:36 |
2020-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199326
|
6.5 |
MEDIUM
Network
|
hp
|
ezmeral_container_platform bluedata_epic
|
The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that is susceptible to unauthorized intercep…
|
CWE-200 CWE-522
Information Exposure Insufficiently Protected Credentials
|
CVE-2020-7196
|
2024-11-21 14:36 |
2020-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199327
|
9.8 |
CRITICAL
Network
|
arubanetworks
|
airwave_glass
|
A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
|
NVD-CWE-noinfo
|
CVE-2020-7127
|
2024-11-21 14:36 |
2020-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199328
|
5.8 |
MEDIUM
Network
|
arubanetworks
|
airwave_glass
|
A remote server-side request forgery (ssrf) vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2020-7126
|
2024-11-21 14:36 |
2020-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199329
|
8.8 |
HIGH
Network
|
arubanetworks
|
airwave_glass
|
A remote escalation of privilege vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
|
CWE-269
Improper Privilege Management
|
CVE-2020-7125
|
2024-11-21 14:36 |
2020-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199330
|
9.8 |
CRITICAL
Network
|
arubanetworks
|
airwave_glass
|
A remote unauthorized access vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
|
NVD-CWE-noinfo
|
CVE-2020-7124
|
2024-11-21 14:36 |
2020-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|