Export limit exceeded: 34260 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (34260 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-7133 1 Hp 1 Hpe Iot \+ Gcp 2024-11-21 9.8 Critical
A unauthorized remote access vulnerability was discovered in HPE IOT + GCP version(s): 1.4.0, 1.4.1, 1.4.2, 1.2.4.2.
CVE-2020-7129 1 Arubanetworks 1 Airwave Glass 2024-11-21 7.2 High
A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
CVE-2020-7127 1 Arubanetworks 1 Airwave Glass 2024-11-21 9.8 Critical
A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
CVE-2020-7124 1 Arubanetworks 1 Airwave Glass 2024-11-21 9.8 Critical
A remote unauthorized access vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
CVE-2020-7123 1 Arubanetworks 1 Clearpass Policy Manager 2024-11-21 7.8 High
A local escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.
CVE-2020-7119 1 Arubanetworks 1 Analytics And Location Engine 2024-11-21 4.9 Medium
A vulnerability exists in the Aruba Analytics and Location Engine (ALE) web management interface 2.1.0.2 and earlier firmware that allows an already authenticated administrative user to arbitrarily modify files as an underlying privileged operating system user.
CVE-2020-7117 1 Arubanetworks 1 Clearpass Policy Manager 2024-11-21 7.2 High
The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution. When the attacker is already authenticated to the administrative interface, they could then exploit the system, leading to remote command execution in the underlying operating system. Resolution: Fixed in 6.7.13-HF, 6.8.5-HF, 6.8.6, 6.9.1 and higher.
CVE-2020-7116 1 Arubanetworks 1 Clearpass Policy Manager 2024-11-21 7.2 High
The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution. When the attacker is already authenticated to the administrative interface, they could then exploit the system, leading to remote command execution in the underlying operating system. Resolution: Fixed in 6.7.13-HF, 6.8.5-HF, 6.8.6, 6.9.1 and higher.
CVE-2020-7113 1 Arubanetworks 1 Clearpass 2024-11-21 4.9 Medium
A vulnerability was found when an attacker, while communicating with the ClearPass management interface, is able to intercept and change parameters in the HTTP packets resulting in the compromise of some of ClearPass' service accounts. Resolution: Fixed in 6.7.10, 6.8.1, 6.9.0 and higher.
CVE-2020-7109 1 Elementor 1 Website Builder 2024-11-21 9.8 Critical
The Elementor Page Builder plugin before 2.8.4 for WordPress does not sanitize data during creation of a new template.
CVE-2020-6939 1 Tableau 1 Tableau Server 2024-11-21 9.8 Critical
Tableau Server installations configured with Site-Specific SAML that allows the APIs to be used by unauthenticated users. If exploited, this could allow a malicious user to configure Site-Specific SAML settings and could lead to account takeover for users of that site. Tableau Server versions affected on both Windows and Linux are: 2018.2 through 2018.2.27, 2018.3 through 2018.3.24, 2019.1 through 2019.1.22, 2019.2 through 2019.2.18, 2019.3 through 2019.3.14, 2019.4 through 2019.4.13, 2020.1 through 2020.1.10, 2020.2 through 2020.2.7, and 2020.3 through 2020.3.2.
CVE-2020-6937 1 Mulesoft 1 Mule Runtime 2024-11-21 7.5 High
A Denial of Service vulnerability in MuleSoft Mule CE/EE 3.8.x, 3.9.x, and 4.x released before April 7, 2020, could allow remote attackers to submit data which can lead to resource exhaustion.
CVE-2020-6931 1 Hp 1 Print And Scan Doctor 2024-11-21 7.8 High
HP Print and Scan Doctor may potentially be vulnerable to local elevation of privilege.
CVE-2020-6922 1 Hp 1 Support Assistant 2024-11-21 7.8 High
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
CVE-2020-6921 1 Hp 1 Support Assistant 2024-11-21 7.8 High
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
CVE-2020-6920 1 Hp 1 Support Assistant 2024-11-21 5.5 Medium
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
CVE-2020-6919 1 Hp 1 Support Assistant 2024-11-21 7.8 High
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
CVE-2020-6918 1 Hp 1 Support Assistant 2024-11-21 7.8 High
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
CVE-2020-6917 1 Hp 1 Support Assistant 2024-11-21 7.8 High
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
CVE-2020-6877 1 Zte 2 Zxa10 Eodn, Zxa10 Eodn Firmware 2024-11-21 8.8 High
A ZTE product is impacted by an information leak vulnerability. An attacker could use this vulnerability to obtain the authentication password of the handheld terminal and access the device illegally for operation. This affects: ZXA10 eODN V2.3P2T1