19 October 2020

98 results · Feed

• Unscored —
  CVE-2020-7141

  A adddevicetoview expression language injection remote code execution vulnerability was discovered in HPE Intelligent M…

  Oct 19, 2020
• Unscored —
  CVE-2020-24652

  A addvsiinterfaceinfo expression language injection remote code execution vulnerability was discovered in HPE Intellige…

  Oct 19, 2020
• Unscored —
  CVE-2020-24651

  A syslogtempletselectwin expression language injection remote code execution vulnerability was discovered in HPE Intell…

  Oct 19, 2020
• Unscored —
  CVE-2020-24650

  A legend expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management…

  Oct 19, 2020
• Unscored —
  CVE-2020-24649

  A remote bytemessageresource transformentity" input validation code execution vulnerability was discovered in HPE Intel…

  Oct 19, 2020
• Unscored —
  CVE-2020-24648 EPSS 11%

  A accessmgrservlet classname deserialization of untrusted data remote code execution vulnerability was discovered in HP…

  Oct 19, 2020
• Unscored —
  CVE-2020-24647

  A remote accessmgrservlet classname input validation code execution vulnerability was discovered in HPE Intelligent Man…

  Oct 19, 2020
• Unscored —
  CVE-2020-24646

  A tftpserver stack-based buffer overflow remote code execution vulnerability was discovered in HPE Intelligent Manageme…

  Oct 19, 2020
• Unscored —
  CVE-2020-24630

  A remote operatoronlinelist_content privilege escalation vulnerability was discovered in HPE Intelligent Management Cen…

  Oct 19, 2020
• Unscored —
  CVE-2020-24629

  A remote urlaccesscontroller authentication bypass vulnerability was discovered in HPE Intelligent Management Center (i…

  Oct 19, 2020
• Medium 6.1
  CVE-2020-26891

  Cross-site scripting (XSS) vulnerability in the fallback authentication endpoint

  AuthRestServlet in Matrix Synapse before 1.21.0 is vulnerable to XSS due to unsafe interpolation of the session GET parameter. This allows a remote attacker to execute an XSS attack on the domain Synapse is hosted on, by supplying the victim user with a malic…

  matrix-synapse matrix-synapse synapse Ubuntu Alpine PyPI
  Oct 19, 2020
• Unscored —
  CVE-2020-24266

  An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in get_l2len() that …

  tcpreplay tcpreplay tcpreplay Debian Ubuntu Alpine
  Oct 19, 2020
• Unscored —
  CVE-2020-24265

  An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in MemcmpInterceptor…

  tcpreplay tcpreplay tcpreplay Debian Ubuntu Alpine
  Oct 19, 2020
• Unscored —
  CVE-2020-15910

  SolarWinds N-Central version 12.3 GA and lower does not set the JSESSIONID attribute to HTTPOnly. This makes it possibl…

  Oct 19, 2020
• Unscored —
  CVE-2020-15909

  SolarWinds N-central through 2020.1 allows session hijacking and requires user interaction or physical access. The N-Ce…

  Oct 19, 2020
• Unscored —
  CVE-2020-13778

  rConfig 3.9.4 and earlier allows authenticated code execution (of system commands) by sending a forged GET request to l…

  Oct 19, 2020
• Medium 5.3
  CVE-2020-8929

  Ciphertext integrity weakness in Tink

  A mis-handling of invalid unicode characters in the Java implementation of Tink versions prior to 1.5 allows an attacker to change the ID part of a ciphertext, which result in the creation of a second ciphertext that can decrypt to the same plaintext. This ca…

  Google Tink com.google.crypto.tink:tink tink Maven PyPI
  Oct 19, 2020
• High 7.1
  CVE-2020-7745

  Malicious Package

  This affects the package MintegralAdSDK before 6.6.0.0. The SDK distributed by the company contains malicious functionality that acts as a backdoor. Mintegral and their partners (advertisers) can remotely execute arbitrary code on a user device.

  Oct 19, 2020