|
211351
|
6.5 |
MEDIUM
Network
|
mikrotik
|
routeros
|
Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/resolver process. An authenticated remote attacker can cause a Denial of Service due to inv…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-20267
|
2024-11-21 14:11 |
2021-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211352
|
6.5 |
MEDIUM
Network
|
mikrotik
|
routeros
|
Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /ram/pckg/wireless/nova/bin/wireless process. An authenticated remote attacker can cause a Denial of …
|
CWE-787
Out-of-bounds Write
|
CVE-2020-20265
|
2024-11-21 14:11 |
2021-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211353
|
6.5 |
MEDIUM
Network
|
mikrotik
|
routeros
|
Mikrotik RouterOs before 6.46.5 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/traceroute process. An authenticated remote attacker can cause a Denial of Service due vi…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-20247
|
2024-11-21 14:11 |
2021-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211354
|
6.5 |
MEDIUM
Network
|
mikrotik
|
routeros
|
Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/traceroute process. An authenticated remote attacker can cause a Denial of Service due via th…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-20218
|
2024-11-21 14:11 |
2021-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211355
|
6.1 |
MEDIUM
Network
|
dogtagpki
|
dogtagpki
|
A flaw was found in the Key Recovery Authority (KRA) Agent Service in pki-core 10.10.5 where it did not properly sanitize the recovery ID during a key recovery request, enabling a reflected cross-sit…
|
-
|
CVE-2020-1721
|
2024-11-21 14:11 |
2021-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211356
|
9.8 |
CRITICAL
Network
|
apache debian fedoraproject
|
spamassassin debian_linux fedora
|
In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of…
|
CWE-78
OS Command
|
CVE-2020-1946
|
2024-11-21 14:11 |
2021-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211357
|
5.9 |
MEDIUM
Network
|
apache
|
hive
|
Apache Hive cookie signature verification used a non constant time comparison which is known to be vulnerable to timing attacks. This could allow recovery of another users cookie signature. The issue…
|
CWE-203
Information Exposure Through Discrepancy
|
CVE-2020-1926
|
2024-11-21 14:11 |
2021-03-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211358
|
9.8 |
CRITICAL
Network
|
facebook
|
hhvm
|
When unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of the dynamic property array before inserting anything into it. Otherwise the array might resize, invalid…
|
CWE-416
Use After Free
|
CVE-2020-1900
|
2024-11-21 14:11 |
2021-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211359
|
7.5 |
HIGH
Network
|
facebook
|
hhvm
|
The unserialize() function supported a type code, "S", which was meant to be supported only for APC serialization. This type code allowed arbitrary memory addresses to be accessed as if they were sta…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2020-1899
|
2024-11-21 14:11 |
2021-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211360
|
7.5 |
HIGH
Network
|
facebook
|
hhvm
|
The fb_unserialize function did not impose a depth limit for nested deserialization. That meant a maliciously constructed string could cause deserialization to recurse, leading to stack exhaustion. T…
|
CWE-674
Uncontrolled Recursion
|
CVE-2020-1898
|
2024-11-21 14:11 |
2021-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|