CVE-2020-3412 Cisco Webex Meetings Scheduled Meeting Template Creation Vulnerability

A vulnerability in the scheduled meeting template feature of Cisco Webex Meetings could allow an authenticated, remote attacker to create a scheduled meeting template that would belong to another user in their organization. The vulnerability is due to insufficient authorization enforcement for th...

CVE-2020-3413 Cisco Webex Meetings Scheduled Meeting Template Deletion Vulnerability

A vulnerability in the scheduled meeting template feature of Cisco Webex Meetings could allow an authenticated, remote attacker to delete a scheduled meeting template that belongs to another user in their organization. The vulnerability is due to insufficient authorization enforcement for request...

PT-2020-6900 · Apache +2 · Apache Shiro +2

Name of the Vulnerable Software and Affected Versions: Apache Shiro versions prior to 1.6.0 Description: The issue is related to weaknesses in the authentication procedure of the Apache Shiro framework. It may allow a remote attacker to bypass existing security restrictions by sending a specially...

ReadyTalk Avian Resource Management Error Vulnerability

ReadyTalk is a suite of cloud communications services that inspire collaboration and connect with a client's most important audiences. A resource management error vulnerability exists in the ReadyTalk Avian product, which can be exploited by an attacker to cause a denial of service with the help ...

Microsoft Windows Remote Desktop Gateway Denial of Service Vulnerability

Windows Server is the brand name of a series of server operating systems released by Microsoft, which includes all Windows operating systems released under the brand name "Windows Server". A denial of service vulnerability exists in Microsoft Windows Remote Desktop Gateway, which can be exploited...

Sonatype Nexus Repository Manager Unauthorized Access Vulnerability

Sonatype Nexus Repository Manager NXRM is a repository manager from Sonatype, Inc. that is used to manage, store, and distribute software, among other things. A security vulnerability exists in Sonatype NXRM OSS/Pro versions prior to 3.26.0. An attacker could exploit the vulnerability to access...

Cisco Webex Meetings Scheduled Meeting Template Deletion (cisco-sa-webex-smtdelete-gJDurOgR)

According to its self-reported version, Cisco Webex Meetings is affected by a vulnerability in the scheduled meeting template feature due to insufficient authorization enforcement for requests to delete scheduled meeting templates. An authenticated, remote attacker can exploit this, by sending a...

Cisco Webex Meetings Scheduled Meeting Template Creation (cisco-sa-webex-smtcreate-YmuD5Sk)

According to its self-reported version, Cisco Webex Meetings is affected by a vulnerability in the scheduled meeting template feature due to insufficient authorization enforcement for the creation of scheduled meeting templates. An authenticated, remote attacker can exploit this, by sending a...

Cisco Webex Meetings Access Control Error Vulnerability (CNVD-2020-45576)

Cisco Webex Meetings is a set of video conferencing solutions from Cisco USA. An access control error vulnerability exists in the meeting scheduling template feature in Cisco?Webex Meetings versions prior to 40.7.0. An attacker could exploit this vulnerability by sending a specially crafted reque...

Improper Validation

solidus does not perform proper validation. The vulnerability exists as it was possible to change the address of the current order without changing the shipment cost through a crafted request data with parameters...

Opmantek Open-AudIT Command Injection (CVE-2020-12078)

A command injection vulnerability exists in Open-AudIT. The vulnerability is due to insufficient input validation in discoverieshelper.php. A remote, authenticated attacker can exploit this vulnerability by sending a crafted request to the target server...

CVE-2020-13523

An exploitable information disclosure vulnerability exists in SoftPerfect’s RAM Disk 4.1 spvve.sys driver. A specially crafted I/O request packet IRP can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability...

Bitwarden Server Code Issue Vulnerability

Bitwarden is a U.S. Bitwarden company's open source password manager. Bitwarden server is Bitwarden's core infrastructure back-end server. A code issue vulnerability exists in Bitwarden Server version 1.35.1. A remote attacker can exploit this vulnerability to obtain sensitive data with the help ...

CVE-2020-3383

A vulnerability in the archive utility of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. The vulnerability is due to a lack of proper input validation of paths that are embedded within archive file...

CVE-2020-3386

A vulnerability in the REST API endpoint of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker with a low-privileged account to bypass authorization on the API of an affected device. The vulnerability is due to insufficient authorization of certain API functions...

Authorization

A vulnerability in the REST API endpoint of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker with a low-privileged account to bypass authorization on the API of an affected device. The vulnerability is due to insufficient authorization of certain API functions...

Directory traversal

A vulnerability in the archive utility of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. The vulnerability is due to a lack of proper input validation of paths that are embedded within archive file...

Authentication flaw

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to obtain confidential information from an affected device. The vulnerability is due to missing authentication on a specific part of the web-based...

CVE-2020-3383 Cisco Data Center Network Manager Path Traversal Vulnerability

A vulnerability in the archive utility of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. The vulnerability is due to a lack of proper input validation of paths that are embedded within archive file...

CVE-2020-3383 Cisco Data Center Network Manager Path Traversal Vulnerability

A vulnerability in the archive utility of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. The vulnerability is due to a lack of proper input validation of paths that are embedded within archive file...