|
209961
|
6.5 |
MEDIUM
Network
|
tangro
|
business_workflow
|
In tangro Business Workflow before 1.18.1, an attacker can manipulate the value of PERSON in requests to /api/profile in order to change profile information of other users.
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2020-26175
|
2024-11-21 14:19 |
2020-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209962
|
8.8 |
HIGH
Network
|
tangro
|
business_workflow
|
tangro Business Workflow before 1.18.1 requests a list of allowed filetypes from the server and restricts uploads to the filetypes contained in this list. However, this restriction is enforced in the…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-26174
|
2024-11-21 14:19 |
2020-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209963
|
4.3 |
MEDIUM
Network
|
tangro
|
business_workflow
|
An incorrect access control implementation in Tangro Business Workflow before 1.18.1 allows an attacker to download documents (PDF) by providing a valid document ID and token. No further authenticati…
|
CWE-306
CWE-639
Missing Authentication for Critical Function
Authorization Bypass Through User-Controlled Key
|
CVE-2020-26173
|
2024-11-21 14:19 |
2020-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209964
|
6.5 |
MEDIUM
Network
|
tangro
|
business_workflow
|
Every login in tangro Business Workflow before 1.18.1 generates the same JWT token, which allows an attacker to reuse the token when a session is active. The JWT token does not contain an expiration …
|
CWE-294
Authentication Bypass by Capture-replay
|
CVE-2020-26172
|
2024-11-21 14:19 |
2020-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209965
|
4.3 |
MEDIUM
Network
|
tangro
|
business_workflow
|
In tangro Business Workflow before 1.18.1, the documentId of attachment uploads to /api/document/attachments/upload can be manipulated. By doing this, users can add attachments to workitems that do n…
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2020-26171
|
2024-11-21 14:19 |
2020-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209966
|
9.8 |
CRITICAL
Network
|
fleetdm
|
fleet
|
Fleet is an open source osquery manager. In Fleet before version 3.5.1, due to issues in Go's standard library XML parsing, a valid SAML response may be mutated by an attacker to modify the trusted d…
|
CWE-290
Authentication Bypass by Spoofing
|
CVE-2020-26276
|
2024-11-21 14:19 |
2020-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209967
|
8.8 |
HIGH
Network
|
systeminformation
|
systeminformation
|
In systeminformation (npm package) before version 4.31.1 there is a command injection vulnerability. The problem was fixed in version 4.31.1 with a shell string sanitation fix.
|
CWE-78
OS Command
|
CVE-2020-26274
|
2024-11-21 14:19 |
2020-12-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209968
|
6.1 |
MEDIUM
Network
|
dell
|
idrac9_firmware
|
Dell EMC iDRAC9 versions prior to 4.32.10.00 and 4.40.00.00 contain a reflected cross-site scripting vulnerability in the iDRAC9 web application. A remote attacker could potentially exploit this vuln…
|
CWE-79
Cross-site Scripting
|
CVE-2020-26198
|
2024-11-21 14:19 |
2020-12-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209969
|
5.2 |
MEDIUM
Local
|
linuxfoundation
|
osquery
|
osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. In osquery before version 4.6.0, by using sqlite's ATTACH verb, someone with administrative access to o…
|
CWE-77
Command Injection
|
CVE-2020-26273
|
2024-11-21 14:19 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209970
|
6.8 |
MEDIUM
Network
|
xstream_project
debian
fedoraproject
|
xstream
debian_linux
fedora
|
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling. The vulnerabi…
|
-
|
CVE-2020-26259
|
2024-11-21 14:19 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
