|
208141
|
3.2 |
LOW
Local
|
qemu
|
qemu
|
pci_change_irq_level in hw/pci/pci.c in QEMU before 5.1.1 has a NULL pointer dereference because pci_get_bus() might not return a valid pointer.
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-25742
|
2024-11-21 14:18 |
2020-10-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208142
|
7.2 |
HIGH
Network
|
craftercms
|
studio
|
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy scripting. This issue affects: …
|
CWE-913
Improper Control of Dynamically-Managed Code Resources
|
CVE-2020-25802
|
2024-11-21 14:18 |
2020-10-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208143
|
7.5 |
HIGH
Network
|
redhat netapp
|
wildfly_openssl jboss_enterprise_application_platform single_sign-on jboss_fuse jboss_data_grid openshift_application_runtimes data_grid oncommand_workflow_automation oncomman…
|
A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. It may allow the attacker to cause OOM leading to a denial of service. The highest …
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2020-25644
|
2024-11-21 14:18 |
2020-10-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208144
|
7.2 |
HIGH
Network
|
linux redhat opensuse debian netapp starwindsoftware
|
linux_kernel enterprise_linux leap debian_linux h410c_firmware starwind_virtual_san
|
A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function wh…
|
-
|
CVE-2020-25643
|
2024-11-21 14:18 |
2020-10-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208145
|
5.5 |
MEDIUM
Local
|
linux redhat opensuse debian canonical
|
linux_kernel enterprise_linux leap debian_linux ubuntu_linux
|
A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A zero-length biovec request issued by the block subsystem could cause the kernel to enter an infinite loo…
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2020-25641
|
2024-11-21 14:18 |
2020-10-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208146
|
6.7 |
MEDIUM
Local
|
redhat opensuse
|
libvirt leap
|
A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about network interfaces of a running QEMU domain. This flaw affects…
|
-
|
CVE-2020-25637
|
2024-11-21 14:18 |
2020-10-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208147
|
7.5 |
HIGH
Network
|
ruby-lang fedoraproject
|
ruby webrick fedora
|
An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a simple HTTP server bundled with Ruby, had not checked the transfer-encoding header value rigoro…
|
CWE-444
HTTP Request Smuggling
|
CVE-2020-25613
|
2024-11-21 14:18 |
2020-10-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208148
|
5.5 |
MEDIUM
Local
|
redhat
|
ansible
|
A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. Th…
|
CWE-212
Improper Removal of Sensitive Information Before Storage or Transfer
|
CVE-2020-25635
|
2024-11-21 14:18 |
2020-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208149
|
7.1 |
HIGH
Local
|
redhat
|
ansible
|
A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to hav…
|
CWE-552
Files or Directories Accessible to External Parties
|
CVE-2020-25636
|
2024-11-21 14:18 |
2020-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208150
|
7.8 |
HIGH
Local
|
trendmicro
|
antivirus
|
Trend Micro Antivirus for Mac 2020 (Consumer) is vulnerable to a symbolic link privilege escalation attack where an attacker could exploit a critical file on the system to escalate their privileges. …
|
CWE-59
Link Following
|
CVE-2020-25776
|
2024-11-21 14:18 |
2020-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|