Skip to main content
CVE-2020-24578 Dec 22, 19:15 MEDIUM POC This Month

An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. Rated medium severity (CVSS 6.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure D-Link Dsl2888A Firmware
NVD
CVSS 3.1
6.5
EPSS
1.8%
CVE-2020-35609 Dec 22, 20:15 MEDIUM POC This Month

A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure Sphere 20.05. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Microsoft Azure Sphere
NVD
CVSS 3.1
5.5
EPSS
1.3%
CVE-2020-27336 Dec 22, 22:15 MEDIUM This Month

An issue was discovered in Treck IPv6 before 6.0.1.68. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Ipv6 Treck
NVD
CVSS 3.1
5.3
EPSS
1.7%
CVE-2020-14270 Dec 22, 21:15 MEDIUM PATCH This Month

HCL Domino v9, v10, v11 is susceptible to an Information Disclosure vulnerability in XPages due to improper error handling of user input. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Domino Hcltech
NVD
CVSS 3.1
5.3
EPSS
0.9%
CVE-2020-14874 Dec 22, 22:15 MEDIUM This Month

Vulnerability in the Oracle Cloud Infrastructure Identity and Access Management product of Oracle Cloud Services. Rated medium severity (CVSS 4.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Oracle Cloud Infrastructure Identity And Access Management
NVD
CVSS 3.1
4.7
EPSS
0.8%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy