|
208671
|
7.8 |
HIGH
Local
|
trendmicro
|
apex_one
|
A vulnerability in Trend Micro Apex One may allow a local attacker to manipulate the process of the security agent unload option (if configured), which then could be manipulated to gain a privilege e…
|
CWE-287
Improper Authentication
|
CVE-2020-24563
|
2024-11-21 14:14 |
2020-09-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208672
|
7.8 |
HIGH
Local
|
trendmicro
|
officescan
|
A vulnerability in Trend Micro OfficeScan XG SP1 on Microsoft Windows may allow an attacker to create a hard link to any file on the system, which then could be manipulated to gain a privilege escala…
|
CWE-59
Link Following
|
CVE-2020-24562
|
2024-11-21 14:14 |
2020-09-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208673
|
8.8 |
HIGH
Network
|
multi_user_project
|
multi_user
|
A Cross-Site Request Forgery (CSRF) vulnerability in the Multi User plugin 1.8.2 for GetSimple CMS allows remote attackers to add admin (or other) users after an authenticated admin visits a third-pa…
|
CWE-352
Origin Validation Error
|
CVE-2020-23837
|
2024-11-21 14:14 |
2020-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208674
|
8.8 |
HIGH
Network
|
gemteks
|
wrtm-127acn_firmware wrtm-127x9_firmware
|
An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic network page allows an authenticated attacker to execute a command directly on t…
|
CWE-78 CWE-1188
OS Command Insecure Default Initialization of Resource
|
CVE-2020-24365
|
2024-11-21 14:14 |
2020-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208675
|
7.5 |
HIGH
Network
|
trendmicro
|
antivirus\+_2019 internet_security_2019 maximum_security_2019 officescan_cloud premium_security_2019
|
An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allow an attacker to combine this vulnerability with another a…
|
CWE-295
Improper Certificate Validation
|
CVE-2020-24560
|
2024-11-21 14:14 |
2020-09-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208676
|
7.5 |
HIGH
Network
|
ygopro
|
ygocore
|
An integer overflow was discovered in YGOPro ygocore v13.51. Attackers can use it to leak the game server thread's memory.
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2020-24213
|
2024-11-21 14:14 |
2020-09-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208677
|
6.5 |
MEDIUM
Network
|
arista
|
cloudvision_portal
|
A vulnerability in Arista’s CloudVision Portal (CVP) prior to 2020.2 allows users with “read-only” or greater access rights to the Configlet Management module to download files not intended for acces…
|
NVD-CWE-noinfo
|
CVE-2020-24333
|
2024-11-21 14:14 |
2020-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208678
|
7.2 |
HIGH
Network
|
titanhq
|
spamtitan
|
A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number of tools of the operating system. This re…
|
CWE-269
Improper Privilege Management
|
CVE-2020-24046
|
2024-11-21 14:14 |
2020-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208679
|
7.2 |
HIGH
Network
|
titanhq
|
spamtitan
|
A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number of tools of the operating system. The res…
|
CWE-345
Insufficient Verification of Data Authenticity
|
CVE-2020-24045
|
2024-11-21 14:14 |
2020-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208680
|
9.6 |
CRITICAL
Network
|
free
|
freebox_revolution_firmware freebox_mini_firmware freebox_one_firmware freebox_delta_firmware freebox_pop_firmware
|
A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3.
|
CWE-20
Improper Input Validation
|
CVE-2020-24377
|
2024-11-21 14:14 |
2020-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|