|
208221
|
9.8 |
CRITICAL
Network
|
hcc-embedded
|
nichestack_tcp\/ip
|
The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The component is: DNS response processing functions: dns_upcall(…
|
CWE-125 CWE-787
Out-of-bounds Read Out-of-bounds Write
|
CVE-2020-25928
|
2024-11-21 14:19 |
2021-08-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208222
|
8.8 |
HIGH
Network
|
dell
|
emc_powerscale_onefs emc_isilon_onefs
|
Dell EMC Isilon OneFS supported versions 8.1 and later and Dell EMC PowerScale OneFS supported version 9.0.0 contain an access issue with the remotesupport user account. A remote malicious user with …
|
CWE-276
Incorrect Default Permissions
|
CVE-2020-26180
|
2024-11-21 14:19 |
2021-07-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208223
|
6.1 |
MEDIUM
Network
|
eventespresso
|
event_espresso
|
A cross-site scripting (XSS) vulnerability in wp-content/plugins/event-espresso-core-reg/admin_pages/messages/templates/ee_msg_admin_overview.template.php in the Event Espresso Core plugin before 4.1…
|
CWE-79
Cross-site Scripting
|
CVE-2020-26153
|
2024-11-21 14:19 |
2021-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208224
|
6.5 |
MEDIUM
Network
|
silverstripe
|
silverstripe
|
In SilverStripe through 4.6.0-rc1, GraphQL doesn't honour MFA (multi-factor authentication) when using basic authentication.
|
CWE-287
Improper Authentication
|
CVE-2020-26136
|
2024-11-21 14:19 |
2021-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208225
|
5.3 |
MEDIUM
Network
|
silverstripe
|
silverstripe
|
In SilverStripe through 4.6.0-rc1, a FormField with square brackets in the field name skips validation.
|
CWE-20
Improper Input Validation
|
CVE-2020-26138
|
2024-11-21 14:19 |
2021-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208226
|
4.8 |
MEDIUM
Network
|
intland
|
codebeamer
|
A cross-site scripting (XSS) issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. It is possible to perform XSS attacks through using the WebDAV functionality to upload files to a pr…
|
CWE-79
Cross-site Scripting
|
CVE-2020-26517
|
2024-11-21 14:19 |
2021-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208227
|
8.8 |
HIGH
Network
|
intland
|
codebeamer
|
A CSRF issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. Requests sent to the server that trigger actions do not contain a CSRF token and can therefore be entirely predicted allow…
|
CWE-352
Origin Validation Error
|
CVE-2020-26516
|
2024-11-21 14:19 |
2021-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208228
|
7.5 |
HIGH
Network
|
intland
|
codebeamer
|
An insufficiently protected credentials issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. The remember-me cookie (CB_LOGIN) issued by the application contains the encrypted user's…
|
CWE-327 CWE-522
Use of a Broken or Risky Cryptographic Algorithm Insufficiently Protected Credentials
|
CVE-2020-26515
|
2024-11-21 14:19 |
2021-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208229
|
6.1 |
MEDIUM
Network
|
online_examination_system_project
|
online_examination_system
|
Project Worlds Online Examination System 1.0 is affected by Cross Site Scripting (XSS) via account.php.
|
CWE-79
Cross-site Scripting
|
CVE-2020-26006
|
2024-11-21 14:19 |
2021-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208230
|
5.3 |
MEDIUM
Network
|
openbsd
|
openbsd
|
An issue was discovered in the kernel in OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. An adversary can abuse this to inject arbitrary network pack…
|
CWE-74
Injection
|
CVE-2020-26142
|
2024-11-21 14:19 |
2021-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|