Filtered by CWE-158
Filtered by vendor Subscriptions
Total 23 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-7928 1 Mongodb 1 Mongodb 2024-11-21 6.5 Medium
A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects MongoDB Server v4.4 versions prior to 4.4.1; MongoDB Server v4.2 versions prior to 4.2.9; MongoDB Server v4.0 versions prior to 4.0.20 and MongoDB Server v3.6 versions prior to 3.6.20.
CVE-2020-5363 1 Dell 36 Latitude 5300, Latitude 5300 2-in-1, Latitude 5300 2-in-1 Firmware and 33 more 2024-11-21 8.6 High
Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be changed through Dell's manageability interface without knowledge of the current BIOS Admin password. This could potentially allow an unauthorized actor, with physical access and/or OS administrator privileges to the device, to gain privileged access to the platform and the hard drive.
CVE-2020-14500 1 Secomea 2 Gatemanager 8250, Gatemanager 8250 Firmware 2024-11-21 10 Critical
Secomea GateManager all versions prior to 9.2c, An attacker can send a negative value and overwrite arbitrary data.