Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2020-1061 |
|
Buffer Overflow in microsoft (CVE-2020-1061)
vulnerability in microsoft (CVE-2020-1061). Successful exploitation can lead to full system takeover.
|
| CVE-2020-1062 |
|
Buffer Overflow in microsoft (CVE-2020-1062)
vulnerability in microsoft (CVE-2020-1062). Successful exploitation can lead to full system takeover.
|
| CVE-2020-1064 |
|
Vulnerability in microsoft (CVE-2020-1064)
vulnerability in microsoft (CVE-2020-1064). Successful exploitation can lead to full system takeover.
|
| CVE-2020-1065 |
|
Out-of-Bounds Write in microsoft (CVE-2020-1065)
out-of-bounds write in microsoft (CVE-2020-1065). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-1067 |
|
Buffer Overflow in microsoft (CVE-2020-1067)
vulnerability in microsoft (CVE-2020-1067). Successful exploitation can lead to full system takeover.
|
| CVE-2020-1069 |
|
Buffer Overflow in csharp (CVE-2020-1069)
vulnerability in csharp (CVE-2020-1069). Successful exploitation can lead to full system takeover.
|
| CVE-2020-1055 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2020-1055)
cross-site scripting in microsoft (CVE-2020-1055). Confidential information can be exposed externally.
|
| CVE-2020-1063 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2020-1063)
cross-site scripting in microsoft (CVE-2020-1063). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-0901 |
|
Buffer Overflow in microsoft (CVE-2020-0901)
vulnerability in microsoft (CVE-2020-0901). Successful exploitation can lead to full system takeover.
|
| CVE-2020-1023 |
|
Unrestricted File Upload in microsoft (CVE-2020-1023)
vulnerability in microsoft (CVE-2020-1023). Successful exploitation can lead to full system takeover.
|
| CVE-2020-1024 |
|
Unrestricted File Upload in microsoft (CVE-2020-1024)
vulnerability in microsoft (CVE-2020-1024). Successful exploitation can lead to full system takeover.
|
| CVE-2020-1035 |
|
Buffer Overflow in microsoft (CVE-2020-1035)
vulnerability in microsoft (CVE-2020-1035). Successful exploitation can lead to full system takeover.
|
| CVE-2020-1037 |
|
Out-of-Bounds Write in microsoft (CVE-2020-1037)
out-of-bounds write in microsoft (CVE-2020-1037). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-1051 |
|
Buffer Overflow in microsoft (CVE-2020-1051)
vulnerability in microsoft (CVE-2020-1051). Successful exploitation can lead to full system takeover.
|
| CVE-2020-0909 |
|
Vulnerability in dos (CVE-2020-0909)
vulnerability in dos (CVE-2020-0909). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-9484 |
|
Unsafe Deserialization in org.apache.tomcat:tomcat-catalina (CVE-2020-9484)
vulnerability in org.apache.tomcat:tomcat-catalina (CVE-2020-9484). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `7.0.104` or later.
|
| CVE-2020-3334 |
|
Vulnerability in c (CVE-2020-3334)
vulnerability in c (CVE-2020-3334). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-3303 |
|
Vulnerability in dos (CVE-2020-3303)
vulnerability in dos (CVE-2020-3303). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-3305 |
|
Vulnerability in dos (CVE-2020-3305)
vulnerability in dos (CVE-2020-3305). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-3306 |
|
Vulnerability in dos (CVE-2020-3306)
vulnerability in dos (CVE-2020-3306). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-3188 |
|
Vulnerability in dos (CVE-2020-3188)
vulnerability in dos (CVE-2020-3188). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-3189 |
|
Vulnerability in dos (CVE-2020-3189)
vulnerability in dos (CVE-2020-3189). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-3191 |
|
Vulnerability in c (CVE-2020-3191)
vulnerability in c (CVE-2020-3191). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-3195 |
|
Vulnerability in dos (CVE-2020-3195)
vulnerability in dos (CVE-2020-3195). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-3196 |
|
Vulnerability in dos (CVE-2020-3196)
vulnerability in dos (CVE-2020-3196). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-3254 |
|
Vulnerability in dos (CVE-2020-3254)
vulnerability in dos (CVE-2020-3254). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-3255 |
|
Vulnerability in dos (CVE-2020-3255)
vulnerability in dos (CVE-2020-3255). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-3283 |
|
Buffer Overflow in dos (CVE-2020-3283)
vulnerability in dos (CVE-2020-3283). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-3298 |
|
Out-of-Bounds Read in dos (CVE-2020-3298)
vulnerability in dos (CVE-2020-3298). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-3187 |
|
Path Traversal in c (CVE-2020-3187)
path traversal in c (CVE-2020-3187). Confidential information can be exposed externally.
|
| CVE-2020-3179 |
|
Vulnerability in dos (CVE-2020-3179)
vulnerability in dos (CVE-2020-3179). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-11111 |
|
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, an...
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, and activemq-pool-jms).
|
| CVE-2020-11112 |
|
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.proxy.provider.remoting.RmiProvider (aka apache/common...
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.proxy.provider.remoting.RmiProvider (aka apache/commons-proxy).
|
| CVE-2020-11113 |
|
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).
|
| CVE-2020-10969 |
|
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.
|
| CVE-2020-10968 |
|
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy).
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy).
|
| CVE-2020-10672 |
|
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka...
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka aries.transaction.jms).
|
| CVE-2020-10673 |
|
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).
|
| CVE-2020-10246 |
|
Cross-Site Scripting (XSS) in misp-project (CVE-2020-10246)
cross-site scripting in misp-project (CVE-2020-10246). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-10247 |
|
Cross-Site Scripting (XSS) in misp-project (CVE-2020-10247)
cross-site scripting in misp-project (CVE-2020-10247). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-9281 |
|
Cross-Site Scripting (XSS) in ckeditor (CVE-2020-9281)
cross-site scripting in ckeditor (CVE-2020-9281). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-17571 |
|
Unsafe Deserialization in log4j:log4j (CVE-2019-17571)
vulnerability in log4j:log4j (CVE-2019-17571). Successful exploitation can lead to full system takeover.
|
| CVE-2019-10219 |
|
Cross-Site Scripting (XSS) in redhat (CVE-2019-10219)
cross-site scripting in redhat (CVE-2019-10219). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-15256 |
|
Vulnerability in dos (CVE-2019-15256)
vulnerability in dos (CVE-2019-15256). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-12698 |
|
Vulnerability in dos (CVE-2019-12698)
vulnerability in dos (CVE-2019-12698). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-12700 |
|
Vulnerability in dos (CVE-2019-12700)
vulnerability in dos (CVE-2019-12700). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-12695 |
|
Cross-Site Scripting (XSS) in cisco (CVE-2019-12695)
cross-site scripting in cisco (CVE-2019-12695). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-12675 |
|
Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their FTD instance and...
Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their FTD instance and execute commands with root privileges in the host namespace. These vulnerabilities are due to insuff...
|
| CVE-2019-12673 |
|
Buffer Overflow in dos (CVE-2019-12673)
vulnerability in dos (CVE-2019-12673). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-12676 |
|
Vulnerability in dos (CVE-2019-12676)
vulnerability in dos (CVE-2019-12676). Risk of unauthorized operations or information disclosure.
|