|
208471
|
5.9 |
MEDIUM
Network
|
redhat
|
keycloak openstack
|
A flaw was found in Keycloak in versions before 10.0.0, where it does not perform the TLS hostname verification while sending emails using the SMTP server. This flaw allows an attacker to perform a m…
|
CWE-295
Improper Certificate Validation
|
CVE-2020-1758
|
2024-11-21 14:11 |
2020-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208472
|
7.1 |
HIGH
Local
|
huawei
|
honor_view_20_firmware honor_20_firmware honor_20_pro_firmware honor_magic2_firmware
|
Honor 20;HONOR 20 PRO;Honor Magic2;HUAWEI Mate 20 X;HUAWEI P30;HUAWEI P30 Pro;Honor View 20 smartphones with versions earlier than 10.0.0.187(C00E60R4P11); versions earlier than 10.0.0.187(C00E60R4P1…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-1808
|
2024-11-21 14:11 |
2020-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208473
|
4.7 |
MEDIUM
Local
|
apache
|
flink
|
A vulnerability in Apache Flink (1.1.0 to 1.1.5, 1.2.0 to 1.2.1, 1.3.0 to 1.3.3, 1.4.0 to 1.4.2, 1.5.0 to 1.5.6, 1.6.0 to 1.6.4, 1.7.0 to 1.7.2, 1.8.0 to 1.8.3, 1.9.0 to 1.9.2, 1.10.0) where, when ru…
|
NVD-CWE-noinfo
|
CVE-2020-1960
|
2024-11-21 14:11 |
2020-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208474
|
6.1 |
MEDIUM
Network
|
apache oracle
|
activemq flexcube_private_banking enterprise_repository communications_element_manager communications_diameter_signaling_router communications_session_report_manager communications_…
|
In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue.
|
CWE-79
Cross-site Scripting
|
CVE-2020-1941
|
2024-11-21 14:11 |
2020-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208475
|
6.3 |
MEDIUM
Local
|
apache canonical fedoraproject opensuse oracle
|
ant ubuntu_linux fedora leap flexcube_investor_servicing flexcube_private_banking primavera_unifier retail_integration_bus retail_store_inventory_management enterprise_repo…
|
Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The…
|
CWE-668
Exposure of Resource to Wrong Sphere
|
CVE-2020-1945
|
2024-11-21 14:11 |
2020-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208476
|
6.1 |
MEDIUM
Network
|
paloaltonetworks
|
pan-os
|
An open redirection vulnerability in the GlobalProtect component of Palo Alto Networks PAN-OS allows an attacker to specify an arbitrary redirection target away from the trusted GlobalProtect gateway…
|
CWE-601
Open Redirect
|
CVE-2020-1997
|
2024-11-21 14:11 |
2020-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208477
|
8.8 |
HIGH
Network
|
paloaltonetworks
|
pan-os
|
An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of the intended SAML permissions of the account when the username is shared for the…
|
CWE-863
Incorrect Authorization
|
CVE-2020-1998
|
2024-11-21 14:11 |
2020-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208478
|
5.3 |
MEDIUM
Network
|
paloaltonetworks
|
pan-os
|
A missing authorization vulnerability in the management server component of PAN-OS Panorama allows a remote unauthenticated user to inject messages into the management server ms.log file. This vulner…
|
CWE-862
Missing Authorization
|
CVE-2020-1996
|
2024-11-21 14:11 |
2020-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208479
|
4.9 |
MEDIUM
Network
|
paloaltonetworks
|
pan-os
|
A NULL pointer dereference vulnerability in Palo Alto Networks PAN-OS allows an authenticated administrator to send a request that causes the rasmgr daemon to crash. Repeated attempts to send this re…
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-1995
|
2024-11-21 14:11 |
2020-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208480
|
4.4 |
MEDIUM
Local
|
paloaltonetworks
|
pan-os
|
A predictable temporary file vulnerability in PAN-OS allows a local authenticated user with shell access to corrupt arbitrary system files affecting the integrity of the system. This issue affects: A…
|
NVD-CWE-Other
|
CVE-2020-1994
|
2024-11-21 14:11 |
2020-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|