|
210161
|
8.8 |
HIGH
Network
|
paloaltonetworks
|
pan-os
|
An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of the intended SAML permissions of the account when the username is shared for the…
|
CWE-863
Incorrect Authorization
|
CVE-2020-1998
|
2024-11-21 14:11 |
2020-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210162
|
5.3 |
MEDIUM
Network
|
paloaltonetworks
|
pan-os
|
A missing authorization vulnerability in the management server component of PAN-OS Panorama allows a remote unauthenticated user to inject messages into the management server ms.log file. This vulner…
|
CWE-862
Missing Authorization
|
CVE-2020-1996
|
2024-11-21 14:11 |
2020-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210163
|
4.9 |
MEDIUM
Network
|
paloaltonetworks
|
pan-os
|
A NULL pointer dereference vulnerability in Palo Alto Networks PAN-OS allows an authenticated administrator to send a request that causes the rasmgr daemon to crash. Repeated attempts to send this re…
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-1995
|
2024-11-21 14:11 |
2020-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210164
|
4.4 |
MEDIUM
Local
|
paloaltonetworks
|
pan-os
|
A predictable temporary file vulnerability in PAN-OS allows a local authenticated user with shell access to corrupt arbitrary system files affecting the integrity of the system. This issue affects: A…
|
NVD-CWE-Other
|
CVE-2020-1994
|
2024-11-21 14:11 |
2020-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210165
|
5.4 |
MEDIUM
Network
|
paloaltonetworks
|
pan-os
|
The GlobalProtect Portal feature in PAN-OS does not set a new session identifier after a successful user login, which allows session fixation attacks, if an attacker is able to control a user's sessi…
|
CWE-384
Session Fixation
|
CVE-2020-1993
|
2024-11-21 14:11 |
2020-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210166
|
8.8 |
HIGH
Network
|
redhat
quarkus
|
keycloak
decision_manager
single_sign-on
jboss_fuse
process_automation
openshift_application_runtimes
quarkus
|
A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without type checks. This flaw allows an attacker to inject arbitrarily serialized Java Ob…
|
CWE-20
Improper Input Validation
|
CVE-2020-1714
|
2024-11-21 14:11 |
2020-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210167
|
8.8 |
HIGH
Network
|
redhat
|
keycloak
jboss_fuse
openshift_application_runtimes
|
A flaw was found in the reset credential flow in all Keycloak versions before 8.0.0. This flaw allows an attacker to gain unauthorized access to the application.
|
CWE-287
Improper Authentication
|
CVE-2020-1718
|
2024-11-21 14:11 |
2020-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210168
|
5.0 |
MEDIUM
Local
|
redhat
debian
|
ansible_tower
ansible_engine
debian_linux
|
A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.…
|
-
|
CVE-2020-1746
|
2024-11-21 14:11 |
2020-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210169
|
9.8 |
CRITICAL
Network
|
apache
|
nuttx
|
The Apache NuttX (Incubating) project provides an optional separate "apps" repository which contains various optional components and example programs. One of these, ftpd, had a NULL pointer dereferen…
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-1939
|
2024-11-21 14:11 |
2020-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210170
|
7.5 |
HIGH
Network
|
libreswan
|
libreswan
|
An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending speciall…
|
-
|
CVE-2020-1763
|
2024-11-21 14:11 |
2020-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
