Skip to main content
CVE-2020-15645 Aug 25, 21:15 HIGH POC THREAT This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE File Upload Qconvergeconsole Marvell
NVD
CVSS 3.1
8.8
EPSS
10.7%
CVE-2020-15643 Aug 25, 21:15 HIGH POC THREAT This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Path Traversal Qconvergeconsole Marvell
NVD
CVSS 3.1
8.8
EPSS
59.3%
CVE-2020-24616 Aug 25, 18:15 HIGH PATCH This Week

FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka Anteros-DBCP). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. This Deserialization of Untrusted Data vulnerability could allow attackers to execute arbitrary code through malicious serialized objects.

Deserialization Debian Oracle Active Iq Unified Manager Debian Linux +25
NVD GitHub VulDB
CVSS 3.1
8.1
EPSS
9.3%
CVE-2020-17400 Aug 25, 21:15 HIGH This Week

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Parallels Desktop Parallels
NVD
CVSS 3.1
8.8
EPSS
0.5%
CVE-2020-17399 Aug 25, 21:15 HIGH This Week

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Parallels Desktop Parallels
NVD
CVSS 3.1
8.8
EPSS
0.5%
CVE-2020-17396 Aug 25, 21:15 HIGH This Week

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Integer Overflow Parallels Desktop Parallels
NVD
CVSS 3.1
8.8
EPSS
0.5%
CVE-2020-17392 Aug 25, 21:15 HIGH This Week

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.3-47255. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Parallels Desktop Parallels
NVD
CVSS 3.1
8.8
EPSS
0.5%
CVE-2020-17390 Aug 25, 21:15 HIGH This Week

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Parallels Desktop Parallels
NVD
CVSS 3.1
8.8
EPSS
0.5%
CVE-2020-17389 Aug 25, 21:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Path Traversal Qconvergeconsole Marvell
NVD
CVSS 3.1
8.8
EPSS
10.1%
CVE-2020-17388 Aug 25, 21:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Tomcat Qconvergeconsole Marvell
NVD
CVSS 3.1
8.8
EPSS
7.5%
CVE-2020-17387 Aug 25, 21:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Path Traversal Qconvergeconsole Marvell
NVD
CVSS 3.1
8.8
EPSS
10.1%
CVE-2020-15644 Aug 25, 21:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Path Traversal Qconvergeconsole Marvell
NVD
CVSS 3.1
8.8
EPSS
9.3%
CVE-2020-15642 Aug 25, 21:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of installations of Marvell QConvergeConsole 5.5.0.64. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Command Injection Qconvergeconsole Marvell
NVD
CVSS 3.1
8.8
EPSS
7.2%
CVE-2020-24614 Aug 25, 14:15 HIGH This Week

Fossil before 2.10.2, 2.11.x before 2.11.2, and 2.12.x before 2.12.1 allows remote authenticated users to execute arbitrary code. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass RCE Fedora Leap Backports Sle +4
NVD
CVSS 3.1
8.8
EPSS
3.1%
CVE-2020-17397 Aug 25, 21:15 HIGH This Week

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. Rated high severity (CVSS 8.2), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Parallels Desktop Parallels
NVD
CVSS 3.1
8.2
EPSS
0.5%
CVE-2020-17395 Aug 25, 21:15 HIGH This Week

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. Rated high severity (CVSS 8.2), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Integer Overflow Parallels Desktop Parallels
NVD
CVSS 3.1
8.2
EPSS
0.5%
CVE-2020-15777 Aug 25, 22:15 HIGH PATCH This Week

An issue was discovered in the Maven Extension plugin before 1.6 for Gradle Enterprise. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation RCE Java Deserialization Gradle +1
NVD
CVSS 3.1
7.8
EPSS
1.0%
CVE-2020-17404 Aug 25, 21:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Foxit Studio Photo Foxitsoftware
NVD
CVSS 3.1
7.8
EPSS
5.3%
CVE-2020-17403 Aug 25, 21:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Foxit Studio Photo Foxitsoftware
NVD
CVSS 3.1
7.8
EPSS
5.3%
CVE-2020-15641 Aug 25, 21:15 HIGH This Week

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Marvell QConvergeConsole 5.5.0.64. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Path Traversal Qconvergeconsole Marvell
NVD
CVSS 3.1
7.5
EPSS
3.2%
CVE-2020-15640 Aug 25, 21:15 HIGH This Week

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Marvell QConvergeConsole 5.5.0.64. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Path Traversal Qconvergeconsole Marvell
NVD
CVSS 3.1
7.5
EPSS
3.2%
CVE-2020-14522 Aug 25, 14:15 HIGH This Week

Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to uncontrolled resource consumption, which may allow an attacker to cause a. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Opc Softing
NVD
CVSS 3.1
7.5
EPSS
1.5%
CVE-2020-14512 Aug 25, 14:15 HIGH This Week

GateManager versions prior to 9.2c, The affected product uses a weak hash type, which may allow an attacker to view user passwords. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Gatemanager 8250 Firmware Secomea
NVD
CVSS 3.1
7.5
EPSS
0.8%
CVE-2020-17385 Aug 25, 08:15 HIGH This Week

Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly, which allows unauthorized user to launch Path Traversal attack and access arbitrate file on the system. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Path Traversal Cellos Cellopoint
NVD
CVSS 3.1
7.5
EPSS
1.6%
CVE-2020-17384 Aug 25, 08:15 HIGH This Week

Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Cellos Cellopoint
NVD
CVSS 3.1
7.2
EPSS
1.9%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy