CVE-2020-35201 - Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp users Stored XSS.
Published: December 12, 2020; 1:15:11 PM -0500

V3.1: 5.4 MEDIUM
V2.0: 3.5 LOW

CVE-2020-35202 - Ignite Realtime Openfire 4.6.0 has plugins/dbaccess/db-access.jsp sql Stored XSS.
Published: December 12, 2020; 1:15:11 PM -0500

V3.1: 5.4 MEDIUM
V2.0: 3.5 LOW

CVE-2020-5950 - On BIG-IP 14.1.0-14.1.2.6, undisclosed endpoints in iControl REST allow for a reflected XSS attack, which could lead to a complete compromise of the BIG-IP system if the victim user is granted the admin role.
Published: December 11, 2020; 2:15:13 PM -0500

V3.1: 5.3 MEDIUM
V2.0: 5.0 MEDIUM

CVE-2020-25109 - An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The number of DNS queries/responses (set in a DNS header) is not checked against the data present. This may lead to successful Denial-of-Service, and possibly Remote Code... read CVE-2020-25109
Published: December 11, 2020; 6:15:14 PM -0500

V3.1: 9.8 CRITICAL
V2.0: 7.5 HIGH

CVE-2020-25108 - An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The DNS response data length is not checked (it can be set to an arbitrary value from a packet). This may lead to successful Denial-of-Service, and possibly Remote Code E... read CVE-2020-25108
Published: December 11, 2020; 6:15:14 PM -0500

V3.1: 9.8 CRITICAL
V2.0: 7.5 HIGH

CVE-2020-25107 - An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. There is no check on whether a domain name has '\0' termination. This may lead to successful Denial-of-Service, and possibly Remote Code Execution.
Published: December 11, 2020; 6:15:14 PM -0500

V3.1: 9.8 CRITICAL
V2.0: 7.5 HIGH

CVE-2020-28859 - OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for reflected cross-site scripting attacks.
Published: December 14, 2020; 2:15:12 PM -0500

V3.1: 6.1 MEDIUM
V2.0: 4.3 MEDIUM

CVE-2020-28858 - OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly verify whether a request made to the application was intentionally made by the user, allowing for cross-site request forgery attacks on all user functions.
Published: December 14, 2020; 2:15:12 PM -0500

V3.1: 8.8 HIGH
V2.0: 6.8 MEDIUM

CVE-2020-28857 - OpenAsset Digital Asset Management (DAM) through 12.0.19, does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for stored cross-site scripting attacks.
Published: December 14, 2020; 2:15:12 PM -0500

V3.1: 6.1 MEDIUM
V2.0: 4.3 MEDIUM

CVE-2020-25110 - An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The length byte of a domain name in a DNS query/response is not checked, and is used for internal memory operations. This may lead to successful Denial-of-Service, and po... read CVE-2020-25110
Published: December 11, 2020; 6:15:14 PM -0500

V3.1: 9.8 CRITICAL
V2.0: 7.5 HIGH

CVE-2020-24633 - There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211) of access-points or cont... read CVE-2020-24633
Published: December 10, 2020; 9:15:10 PM -0500

V3.1: 9.8 CRITICAL
V2.0: 10.0 HIGH

CVE-2020-24634 - An attacker is able to remotely inject arbitrary commands by sending especially crafted packets destined to the PAPI (Aruba Networks AP Management protocol) UDP port (8211) of access-pointsor controllers in Aruba 9000 Gateway; Aruba 7000 Series Mo... read CVE-2020-24634
Published: December 10, 2020; 9:15:11 PM -0500

V3.1: 9.8 CRITICAL
V2.0: 10.0 HIGH

CVE-2020-24637 - Two vulnerabilities in ArubaOS GRUB2 implementation allows for an attacker to bypass secureboot. Successful exploitation of this vulnerability this could lead to remote compromise of system integrity by allowing an attacker to load an untrusted or... read CVE-2020-24637
Published: December 10, 2020; 9:15:11 PM -0500

V3.1: 7.2 HIGH
V2.0: 9.0 HIGH

CVE-2020-17444 - An issue was discovered in picoTCP 1.7.0. The routine for processing the next header field (and deducing whether the IPv6 extension headers are valid) doesn't check whether the header extension length field would overflow. Therefore, if it wraps a... read CVE-2020-17444
Published: December 11, 2020; 6:15:13 PM -0500

V3.1: 7.5 HIGH
V2.0: 5.0 MEDIUM

CVE-2020-17445 - An issue was discovered in picoTCP 1.7.0. The code for processing the IPv6 destination options does not check for a valid length of the destination options header. This results in an Out-of-Bounds Read, and, depending on the memory protection mech... read CVE-2020-17445
Published: December 11, 2020; 6:15:13 PM -0500

V3.1: 7.5 HIGH
V2.0: 5.0 MEDIUM

CVE-2020-24337 - An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. When an unsupported TCP option with zero length is provided in an incoming TCP packet, it is possible to cause a Denial-of-Service by achieving an infinite loop in the code that pars... read CVE-2020-24337
Published: December 11, 2020; 6:15:13 PM -0500

V3.1: 7.5 HIGH
V2.0: 5.0 MEDIUM

CVE-2020-35200 - Ignite Realtime Openfire 4.6.0 has plugins/clientcontrol/spark-form.jsp Reflective XSS.
Published: December 12, 2020; 1:15:11 PM -0500

V3.1: 6.1 MEDIUM
V2.0: 4.3 MEDIUM

CVE-2020-24338 - An issue was discovered in picoTCP through 1.7.0. The DNS domain name record decompression functionality in pico_dns_decompress_name() in pico_dns_common.c does not validate the compression pointer offset values with respect to the actual data pre... read CVE-2020-24338
Published: December 11, 2020; 6:15:13 PM -0500

V3.1: 9.8 CRITICAL
V2.0: 7.5 HIGH

CVE-2020-24339 - An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The DNS domain name record decompression functionality in pico_dns_decompress_name() in pico_dns_common.c does not validate the compression pointer offset values with respect to the ... read CVE-2020-24339
Published: December 11, 2020; 6:15:14 PM -0500

V3.1: 7.5 HIGH
V2.0: 5.0 MEDIUM

CVE-2020-35382 - SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user.
Published: December 14, 2020; 11:15:12 AM -0500

V3.1: 7.2 HIGH
V2.0: 6.5 MEDIUM