CVE-2020-15869

Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS issue 1 of 2...

CVE-2020-15869

CVE-2020-15869 affects Sonatype Nexus Repository Manager OSS/Pro, versions before 3.25.1, due to an XSS vulnerability. The connected documents confirm the affected product and version range; no further technical details (exploit vectors, root cause specifics, or remediation) are provided in the s...

Sierra Wireless AirLink ES450 ACEManager upload.cgi Remote Code Execution Vulnerability

Summary An exploitable remote code execution vulnerability exists in the upload.cgi functionality of Sierra Wireless AirLink ES450 FW 4.9.3. A specially crafted HTTP request can upload a file, resulting in executable code being uploaded, and routable, to the webserver. An attacker can make an...