|
211721
|
7.5 |
HIGH
Network
|
leoeditor
|
leo
|
Leo Editor v6.2.1 was discovered to contain a regular expression denial of service (ReDoS) vulnerability in the component plugins/importers/dart.py.
|
CWE-697
Incorrect Comparison
|
CVE-2020-23478
|
2024-11-21 14:13 |
2021-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211722
|
7.5 |
HIGH
Network
|
gmate_project
|
gmate
|
gmate v0.12+bionic contains a regular expression denial of service (ReDoS) vulnerability in the gedit3 plugin.
|
NVD-CWE-noinfo
|
CVE-2020-23469
|
2024-11-21 14:13 |
2021-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211723
|
5.5 |
MEDIUM
Local
|
broadcom
|
tcpreplay
|
Heap-buffer overflow in the randomize_iparp function in edit_packet.c. of Tcpreplay v4.3.2 allows attackers to cause a denial of service (DOS) via a crafted pcap.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-23273
|
2024-11-21 14:13 |
2021-09-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211724
|
5.5 |
MEDIUM
Local
|
gpac
|
gpac
|
An issue was discovered in gpac 0.8.0. The stbl_GetSampleSize function in isomedia/stbl_read.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted media file.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-23269
|
2024-11-21 14:13 |
2021-09-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211725
|
7.1 |
HIGH
Local
|
gpac
|
gpac
|
An issue was discovered in gpac 0.8.0. The gf_hinter_track_process function in isom_hinter_track_process.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted m…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-23267
|
2024-11-21 14:13 |
2021-09-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211726
|
5.5 |
MEDIUM
Local
|
gpac
|
gpac
|
An issue was discovered in gpac 0.8.0. The OD_ReadUTF8String function in odf_code.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted media file.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-23266
|
2024-11-21 14:13 |
2021-09-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211727
|
9.8 |
CRITICAL
Network
|
chshcms
|
cscms
|
A remote code execution (RCE) vulnerability in the \Playsong.php component of cscms v4.1 allows attackers to execute arbitrary commands.
|
NVD-CWE-noinfo
|
CVE-2020-22848
|
2024-11-21 14:13 |
2021-08-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211728
|
6.1 |
MEDIUM
Network
|
cacti debian
|
cacti debian_linux
|
Multiple Cross Site Scripting (XSS) vulneratiblities exist in Cacti 1.2.12 in (1) reports_admin.php, (2) data_queries.php, (3) data_input.php, (4) graph_templates.php, (5) graphs.php, (6) reports_adm…
|
CWE-79
Cross-site Scripting
|
CVE-2020-23226
|
2024-11-21 14:13 |
2021-08-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211729
|
8.8 |
HIGH
Network
|
centreon
|
centreon
|
/graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter.
|
CWE-78
OS Command
|
CVE-2020-22345
|
2024-11-21 14:13 |
2021-08-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211730
|
7.5 |
HIGH
Network
|
joyplus-cms_project
|
joyplus-cms
|
A vulnerability in the \inc\config.php component of joyplus-cms v1.6 allows attackers to access sensitive information.
|
CWE-552
Files or Directories Accessible to External Parties
|
CVE-2020-22124
|
2024-11-21 14:13 |
2021-08-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|