|
208071
|
7.5 |
HIGH
Network
|
matrix fedoraproject
|
synapse fedora
|
Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinity JSON values in fields of m.room.member events, allowing remote attackers to execute a denial of service atta…
|
CWE-20
Improper Input Validation
|
CVE-2020-26890
|
2024-11-21 14:20 |
2020-11-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208072
|
6.1 |
MEDIUM
Network
|
cisco
|
webex_meetings
|
A vulnerability in an API of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of user-supp…
|
CWE-79
Cross-site Scripting
|
CVE-2020-27126
|
2024-11-21 14:20 |
2020-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208073
|
6.0 |
MEDIUM
Local
|
trustedcomputinggroup
|
trusted_platform_module
|
Trusted Computing Group (TCG) Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1.59 has Incorrect Access Control during a non-orderly TPM shut-down that uses US…
|
CWE-665
Improper Initialization
|
CVE-2020-26933
|
2024-11-21 14:20 |
2020-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208074
|
6.1 |
MEDIUM
Network
|
reddoxx
|
maildepot
|
REDDOXX MailDepot 2033 (aka 2.3.3022) allows XSS via an incoming HTML e-mail message.
|
CWE-79
Cross-site Scripting
|
CVE-2020-26554
|
2024-11-21 14:20 |
2020-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208075
|
6.1 |
MEDIUM
Network
|
rsa
|
archer
|
RSA Archer 6.8 through 6.8.0.3 and 6.9 contains a URL injection vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability by tricking a victim application user in…
|
CWE-74
Injection
|
CVE-2020-26884
|
2024-11-21 14:20 |
2020-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208076
|
9.8 |
CRITICAL
Network
|
aviatrix
|
controller
|
An issue was discovered in Aviatrix Controller before R6.0.2483. Several APIs contain functions that allow arbitrary files to be uploaded to the web tree.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-26553
|
2024-11-21 14:20 |
2020-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208077
|
7.5 |
HIGH
Network
|
aviatrix
|
controller
|
An issue was discovered in Aviatrix Controller before R6.0.2483. Multiple executable files, that implement API endpoints, do not require a valid session ID for access.
|
NVD-CWE-noinfo
|
CVE-2020-26552
|
2024-11-21 14:20 |
2020-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208078
|
7.5 |
HIGH
Network
|
aviatrix
|
controller
|
An issue was discovered in Aviatrix Controller before R5.3.1151. Encrypted key values are stored in a readable file.
|
CWE-312
Cleartext Storage of Sensitive Information
|
CVE-2020-26551
|
2024-11-21 14:20 |
2020-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208079
|
7.5 |
HIGH
Network
|
aviatrix
|
controller
|
An issue was discovered in Aviatrix Controller before R5.3.1151. An encrypted file containing credentials to unrelated systems is protected by a three-character key.
|
CWE-330
Use of Insufficiently Random Values
|
CVE-2020-26550
|
2024-11-21 14:20 |
2020-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208080
|
7.5 |
HIGH
Network
|
aviatrix
|
controller
|
An issue was discovered in Aviatrix Controller before R5.4.1290. The htaccess protection mechanism to prevent requests to directories can be bypassed for file downloading.
|
CWE-552
Files or Directories Accessible to External Parties
|
CVE-2020-26549
|
2024-11-21 14:20 |
2020-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|