5671 matches found
CVE-2020-15043
CVE-2020-15043 affects iBall WRB303N devices (Best IT World India) through a CSRF vulnerability in the web interface. The issue allows unauthorized actions (context: enabling remote management, enabling DHCP, or altering the IP subnet range) due to insufficient request validation. Public details ...
CVE-2020-14971
Pi-hole through 5.0 allows code injection in piholedhcp the Static DHCP Leases section by modifying Teleporter backup files and then restoring them. This occurs in settings.php. To exploit this, an attacker would request a backup of limited files via teleporter.php. These are placed into a .tar.g...
CVE-2020-8903
A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "adm" group, users with this role are able to read the DHCP XID from th...
CVE-2020-8903
A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "adm" group, users with this role are able to read the DHCP XID from th...
Design/Logic Flaw
A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "adm" group, users with this role are able to read the DHCP XID from th...
UBUNTU-CVE-2020-8903
A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "adm" group, users with this role are able to read the DHCP XID from th...
CVE-2020-8903
A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "adm" group, users with this role are able to read the DHCP XID from th...
CVE-2020-8903
CVE-2020-8903 affects Google Cloud Platform's guest-oslogin in versions 20190304–20200507, enabling a user with roles/compute.osLogin to escalate to root by abusing membership in the adm group to read the DHCP XID, modify IP/hostname in /etc/hosts, redirect metadata.google.internal to an arbitrar...
CVE-2020-8903
Removed by vendor...
Ripple20 Vulnerability Mitigation Best Practices
ARCHIVED STORY Ripple20 Vulnerability Mitigation Best Practices By Kevin McGrath · June 22, 2020 On June 16th, the Department of Homeland Security and CISA ICS-CERT issued a critical security advisory warning covering multiple newly discovered vulnerabilities affecting Internet-connected devices...
CVE-2020-11908
The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP...
CVE-2020-11903
The Treck TCP/IP stack before 6.0.1.28 has a DHCP Out-of-bounds Read...
CVE-2020-11908
The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP...
CVE-2020-11905
The Treck TCP/IP stack before 6.0.1.66 has a DHCPv6 Out-of-bounds Read...
CVE-2020-11903
The Treck TCP/IP stack before 6.0.1.28 has a DHCP Out-of-bounds Read...
Design/Logic Flaw
The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP...
Out-of-bounds
The Treck TCP/IP stack before 6.0.1.28 has a DHCP Out-of-bounds Read...
CVE-2020-11908
CVE-2020-11908 affects the Treck TCP/IP stack (embedded) where the DHCP component mishandles null termination. Affected: Treck’s stack prior to 4.7.1.27. Impact per CVE: potential information exposure (CVE-2020-11908 CVSSv3.1 base 4.3, MEDIUM) and related DHCP handling issues. Mitigation: Treck a...
