|
211041
|
7.5 |
HIGH
Network
|
f5
|
big-ip_application_security_manager
big-ip_advanced_web_application_firewall
|
When a BIG-IP ASM or Advanced WAF system running version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, or 11.6.1-11.6.5.2 processes requests with JSON payload, an…
|
NVD-CWE-noinfo
|
CVE-2020-27718
|
2024-11-21 14:21 |
2020-12-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211042
|
8.8 |
HIGH
Network
|
projectworlds
|
online_matrimonial_project
|
Marital - Online Matrimonial Project In PHP version 1.0 suffers from an authenticated file upload vulnerability allowing remote attackers to gain remote code execution (RCE) on the Hosting web server…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-27397
|
2024-11-21 14:21 |
2020-12-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211043
|
7.1 |
HIGH
Adjacent
|
treck
|
ipv6
|
An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the DHCPv6 client component allows an unauthenticated remote attacker to cause an Out of Bounds Read, and possibly …
|
CWE-20
CWE-125
Improper Input Validation
Out-of-bounds Read
|
CVE-2020-27338
|
2024-11-21 14:21 |
2020-12-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211044
|
7.3 |
HIGH
Network
|
treck
|
ipv6
|
An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the IPv6 component allows an unauthenticated remote attacker to cause an Out of Bounds Write, and possibly a Denial…
|
CWE-20
CWE-787
Improper Input Validation
Out-of-bounds Write
|
CVE-2020-27337
|
2024-11-21 14:21 |
2020-12-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211045
|
5.3 |
MEDIUM
Network
|
treck
|
ipv6
|
An issue was discovered in Treck IPv6 before 6.0.1.68. Improper input validation in the IPv6 component when handling a packet sent by an unauthenticated remote attacker could result in an out-of-boun…
|
CWE-20
CWE-125
Improper Input Validation
Out-of-bounds Read
|
CVE-2020-27336
|
2024-11-21 14:21 |
2020-12-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211046
|
9.8 |
CRITICAL
Network
|
grafana
saml_project
redhat
fedoraproject
|
grafana
saml
openshift_container_platform
enterprise_linux
openshift_service_mesh
fedora
|
A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authentication. The highest threat from this vulnerability is to confidentiality, integrity,…
|
-
|
CVE-2020-27846
|
2024-11-21 14:21 |
2020-12-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211047
|
7.1 |
HIGH
Local
|
redhat
fedoraproject
|
ceph
ceph_storage
openshift_container_platform
openstack_platform
fedora
|
User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential privilege escalation. An Open Stack Manila user can request access to a share to …
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2020-27781
|
2024-11-21 14:21 |
2020-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211048
|
8.8 |
HIGH
Network
|
thingsboard
|
thingsboard
|
ThingsBoard before v3.2 is vulnerable to Host header injection in password-reset emails. This allows an attacker to send malicious links in password-reset emails to victims, pointing to an attacker-c…
|
CWE-20
CWE-74
Improper Input Validation
Injection
|
CVE-2020-27687
|
2024-11-21 14:21 |
2020-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211049
|
8.1 |
HIGH
Adjacent
|
mitel
|
mivoice_6940_firmware
mivoice_6930_firmware
|
The Bluetooth handset of Mitel MiVoice 6940 and 6930 MiNet phones with firmware before 1.5.3 could allow an unauthenticated attacker within Bluetooth range to pair a rogue Bluetooth device when a pho…
|
NVD-CWE-noinfo
|
CVE-2020-27640
|
2024-11-21 14:21 |
2020-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211050
|
8.1 |
HIGH
Adjacent
|
mitel
|
6873i_sip_firmware
6930_sip_firmware
6940_sip_firmware
|
The Bluetooth handset of Mitel MiVoice 6873i, 6930, and 6940 SIP phones with firmware before 5.1.0.SP6 could allow an unauthenticated attacker within Bluetooth range to pair a rogue Bluetooth device …
|
NVD-CWE-noinfo
|
CVE-2020-27639
|
2024-11-21 14:21 |
2020-12-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
