|
209231
|
4.4 |
MEDIUM
Local
|
xen
fedoraproject
debian
|
xen
fedora
debian_linux
|
Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the guest) via a side-channel attack on a power/energy monitoring interface, aka a "Pl…
|
CWE-862
Missing Authorization
|
CVE-2020-28368
|
2024-11-21 14:22 |
2020-11-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209232
|
7.8 |
HIGH
Local
|
tcl
|
32s330_firmware
40s330_firmware
43s434_firmware
50s434_firmware
55s434_firmware
65s434_firmware
75s434_firmware
|
A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TCL Technology Group Corporation allows a local unprivileged attacker, such as a …
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2020-28055
|
2024-11-21 14:22 |
2020-11-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209233
|
7.5 |
HIGH
Network
|
set_project
|
set
|
Prototype pollution vulnerability in '@strikeentco/set' version 1.0.0 allows attacker to cause a denial of service and may lead to remote code execution.
|
NVD-CWE-noinfo
|
CVE-2020-28267
|
2024-11-21 14:22 |
2020-11-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209234
|
8.8 |
HIGH
Adjacent
|
netgear
|
r6400v2_firmware
r6400_firmware
r7000p_firmware
xr300_firmware
r8000_firmware
r8300_firmware
r8500_firmware
r7300dst_firmware
r7850_firmware
r7900_firmware
rax20_firmwar…
|
upnpd on certain NETGEAR devices allows remote (LAN) attackers to execute arbitrary code via a stack-based buffer overflow. This affects R6400v2 V1.0.4.102_10.0.75, R6400 V1.0.1.62_1.0.41, R7000P V1.…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-28373
|
2024-11-21 14:22 |
2020-11-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209235
|
9.8 |
CRITICAL
Network
|
readytalk
|
avian
|
An issue was discovered in ReadyTalk Avian 1.2.0 before 2020-10-27. The FileOutputStream.write() method in FileOutputStream.java has a boundary check to prevent out-of-bounds memory read/write operat…
|
CWE-787
CWE-190
Out-of-bounds Write
Integer Overflow or Wraparound
|
CVE-2020-28371
|
2024-11-21 14:22 |
2020-11-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209236
|
6.1 |
MEDIUM
Network
|
locust
|
locust
|
A stored cross-site scripting (XSS) vulnerability affects the Web UI in Locust before 1.3.2, if the installation violates the usage expectations by exposing this UI to outside users.
|
CWE-79
Cross-site Scripting
|
CVE-2020-28364
|
2024-11-21 14:22 |
2020-11-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209237
|
7.8 |
HIGH
Local
|
capasystems
|
capainstaller
|
CapaSystems CapaInstaller before 6.0.101 does not properly assign, modify, or check privileges for an actor who attempts to edit registry values, allowing an attacker to escalate privileges.
|
NVD-CWE-noinfo
|
CVE-2020-27977
|
2024-11-21 14:22 |
2020-11-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209238
|
6.1 |
MEDIUM
Network
|
mitel
|
shoretel_firmware
|
The conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack (via the PATH_INFO to index.php) due…
|
CWE-79
Cross-site Scripting
|
CVE-2020-28351
|
2024-11-21 14:22 |
2020-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209239
|
6.5 |
MEDIUM
Network
|
chirpstack
|
network_server
|
An inaccurate frame deduplication process in ChirpStack Network Server 3.9.0 allows a malicious gateway to perform uplink Denial of Service via malformed frequency attributes in CollectAndCallOnceCol…
|
CWE-20
Improper Input Validation
|
CVE-2020-28349
|
2024-11-21 14:22 |
2020-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209240
|
9.8 |
CRITICAL
Network
|
tp-link
|
ac1750_firmware
|
tdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to execute arbitrary code via the slave_mac parameter. NOTE: this issue exists because of an incomplete fix for CVE…
|
CWE-78
OS Command
|
CVE-2020-28347
|
2024-11-21 14:22 |
2020-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
