|
208571
|
6.1 |
MEDIUM
Network
|
pega
|
pega_platform
|
Pega Platform through 8.4.x is affected by Cross Site Scripting (XSS) via the ConnectionID parameter, as demonstrated by a pyActivity=Data-TRACERSettings.pzStartTracerSession request to a PRAuth URI.
|
CWE-79
Cross-site Scripting
|
CVE-2020-23957
|
2024-11-21 14:14 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208572
|
9.1 |
CRITICAL
Network
|
butok
|
fnet
|
An issue was discovered in FNET through 4.6.4. The code for processing resource records in mDNS queries doesn't check for proper '\0' termination of the resource record name string, leading to an out…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-24383
|
2024-11-21 14:14 |
2020-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208573
|
9.1 |
CRITICAL
Network
|
altran
|
picotcp picotcp-ng
|
An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The TCP input data processing function in pico_tcp.c does not validate the length of incoming TCP packets, which leads to an out-of-bo…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-24341
|
2024-11-21 14:14 |
2020-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208574
|
7.5 |
HIGH
Network
|
altran
|
picotcp picotcp-ng
|
An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The code that processes DNS responses in pico_mdns_handle_data_as_answers_generic() in pico_mdns.c does not check whether the number o…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-24340
|
2024-11-21 14:14 |
2020-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208575
|
7.5 |
HIGH
Network
|
altran
|
picotcp picotcp-ng
|
An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The DNS domain name record decompression functionality in pico_dns_decompress_name() in pico_dns_common.c does not validate the compre…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-24339
|
2024-11-21 14:14 |
2020-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208576
|
9.8 |
CRITICAL
Network
|
altran
|
picotcp
|
An issue was discovered in picoTCP through 1.7.0. The DNS domain name record decompression functionality in pico_dns_decompress_name() in pico_dns_common.c does not validate the compression pointer o…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-24338
|
2024-11-21 14:14 |
2020-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208577
|
7.5 |
HIGH
Network
|
altran
|
picotcp picotcp-ng
|
An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. When an unsupported TCP option with zero length is provided in an incoming TCP packet, it is possible to cause a Denial-of-Service by …
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2020-24337
|
2024-11-21 14:14 |
2020-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208578
|
9.8 |
CRITICAL
Network
|
contiki-os contiki-ng
|
contiki contiki-ng
|
An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5. The code for parsing Type A domain name answers in ip64-dns64.c doesn't verify whether the address in the answer's length is…
|
CWE-120
Classic Buffer Overflow
|
CVE-2020-24336
|
2024-11-21 14:14 |
2020-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208579
|
8.2 |
HIGH
Network
|
uip_project
|
uip
|
The code that processes DNS responses in uIP through 1.0, as used in Contiki and Contiki-NG, does not check whether the number of responses specified in the DNS packet header corresponds to the respo…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-24334
|
2024-11-21 14:14 |
2020-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208580
|
7.0 |
HIGH
Local
|
adobe
|
lightroom
|
Adobe Lightroom Classic version 10.0 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current use…
|
-
|
CVE-2020-24447
|
2024-11-21 14:14 |
2020-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|