MCERT

CVE-2020-26116

27th September 2020 - 06:37

http.client in Python 3.x before 3.5.10| 3.6.x before 3.6.12| 3.7.x before 3.7.9| and 3.8.x before 3.8.5 allows CRLF injection if the attacker control... Read more

CVE-2020-26117

27th September 2020 - 06:37

In rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0| viewers mishandle TLS certificate exceptions. They store the certificates... Read more

CVE-2020-14021 (ozeki_ng_sms_gateway)

26th September 2020 - 06:31

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The ASP.net SMS module can be used to read and validate the source code of ASP files.... Read more

CVE-2020-14022 (ozeki_ng_sms_gateway)

26th September 2020 - 06:31

Ozeki NG SMS Gateway 4.17.1 through 4.17.6 does not check the file type when bulk importing new contacts ("Import Contacts" functionality) from a file... Read more

CVE-2020-14023 (ozeki_ng_sms_gateway)

26th September 2020 - 06:31

Ozeki NG SMS Gateway through 4.17.6 allows SSRF via SMS WCF or RSS To SMS. Link: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-14023 Read more