|
216141
|
9.1 |
CRITICAL
Network
|
qualcomm
|
apq8009_firmware apq8053_firmware qca6390_firmware qcn7605_firmware qcn7606_firmware sa415m_firmware sa515m_firmware sa6155p_firmware sa8155p_firmware sc8180x_firmware s…
|
u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Conne…
|
CWE-125 CWE-190
Out-of-bounds Read Integer Overflow or Wraparound
|
CVE-2020-11169
|
2024-11-21 13:57 |
2020-11-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
216142
|
6.7 |
MEDIUM
Local
|
intel
|
bmc_firmware
|
NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contains a vulnerability in the AMI BMC firmware in which software…
|
CWE-347
Improper Verification of Cryptographic Signature
|
CVE-2020-11488
|
2024-11-21 13:57 |
2020-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
216143
|
7.5 |
HIGH
Network
|
intel
|
bmc_firmware
|
NVIDIA DGX servers, DGX-1 with BMC firmware versions prior to 3.38.30. DGX-2 with BMC firmware versions prior to 1.06.06 and all DGX A100 Servers with all BMC firmware versions, contains a vulnerabil…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2020-11487
|
2024-11-21 13:57 |
2020-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
216144
|
9.8 |
CRITICAL
Network
|
intel
|
bmc_firmware
|
NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which software allows an attacker to upload or transfer files that can be…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-11486
|
2024-11-21 13:57 |
2020-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
216145
|
8.8 |
HIGH
Network
|
intel
|
bmc_firmware
|
NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contains a Cross-Site Request Forgery (CSRF) vulnerability in the AMI BMC firmware in which the web application does not suf…
|
CWE-352
Origin Validation Error
|
CVE-2020-11485
|
2024-11-21 13:57 |
2020-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
216146
|
4.9 |
MEDIUM
Network
|
intel
|
bmc_firmware
|
NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contains a vulnerability in the AMI BMC firmware in which an attacker with administrative privileges can obtain the hash of …
|
NVD-CWE-noinfo
|
CVE-2020-11484
|
2024-11-21 13:57 |
2020-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
216147
|
9.8 |
CRITICAL
Network
|
intel
|
bmc_firmware
|
NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contains a vulnerability in the AMI BMC firmware in which the firm…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2020-11483
|
2024-11-21 13:57 |
2020-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
216148
|
7.2 |
HIGH
Network
|
concretecms
|
concrete_cms
|
Concrete5 before 8.5.3 allows Unrestricted Upload of File with Dangerous Type such as a .phar file.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-11476
|
2024-11-21 13:57 |
2020-07-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
216149
|
7.8 |
HIGH
Local
|
ncp-e
|
secure_enterprise_client
|
NCP Secure Enterprise Client before 10.15 r47589 allows a symbolic link attack on enumusb.reg via Support Assistant.
|
CWE-59
Link Following
|
CVE-2020-11474
|
2024-11-21 13:57 |
2020-07-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
216150
|
7.5 |
HIGH
Network
|
windriver
|
vxworks
|
httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root.
|
NVD-CWE-noinfo
|
CVE-2020-11440
|
2024-11-21 13:57 |
2020-07-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|