|
199671
|
7.5 |
HIGH
Network
|
fast-http_project
|
fast-http
|
This affects all versions of package fast-http. There is no path sanitization in the path provided at fs.readFile in index.js.
|
CWE-22
Path Traversal
|
CVE-2020-7687
|
2024-11-21 14:37 |
2020-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199672
|
7.5 |
HIGH
Network
|
rollup-plugin-dev-server_project
|
rollup-plugin-dev-server
|
This affects all versions of package rollup-plugin-dev-server. There is no path sanitization in readFile operation inside the readFileFromContentBase function.
|
CWE-22
Path Traversal
|
CVE-2020-7686
|
2024-11-21 14:37 |
2020-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199673
|
7.5 |
HIGH
Network
|
rollup-plugin-server_project
|
rollup-plugin-server
|
This affects all versions of package rollup-plugin-server. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function.
|
CWE-22
Path Traversal
|
CVE-2020-7683
|
2024-11-21 14:37 |
2020-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199674
|
7.5 |
HIGH
Network
|
marked-tree_project
|
marked-tree
|
This affects all versions of package marked-tree. There is no path sanitization in the path provided at fs.readFile in index.js.
|
CWE-22
Path Traversal
|
CVE-2020-7682
|
2024-11-21 14:37 |
2020-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199675
|
7.5 |
HIGH
Network
|
indo-mars
|
marscode
|
This affects all versions of package marscode. There is no path sanitization in the path provided at fs.readFile in index.js.
|
CWE-22
Path Traversal
|
CVE-2020-7681
|
2024-11-21 14:37 |
2020-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199676
|
4.7 |
MEDIUM
Network
|
schneider-electric
|
software_update_utility
|
A CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability exists in Schneider Electric Software Update (SESU), V2.4.0 and prior, which could cause execution of malicious code on th…
|
CWE-601
Open Redirect
|
CVE-2020-7520
|
2024-11-21 14:37 |
2020-07-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199677
|
7.5 |
HIGH
Network
|
schneider-electric
|
easergy_builder
|
A CWE-521: Weak Password Requirements vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker to compromise a user account.
|
CWE-521
Weak Password Requirements
|
CVE-2020-7519
|
2024-11-21 14:37 |
2020-07-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199678
|
7.5 |
HIGH
Network
|
schneider-electric
|
easergy_builder
|
A CWE-20: Improper input validation vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker to modify project configuration files.
|
CWE-20
Improper Input Validation
|
CVE-2020-7518
|
2024-11-21 14:37 |
2020-07-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199679
|
5.5 |
MEDIUM
Local
|
schneider-electric
|
easergy_builder
|
A CWE-312: Cleartext Storage of Sensitive Information vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker to read user credentials.
|
CWE-312
Cleartext Storage of Sensitive Information
|
CVE-2020-7517
|
2024-11-21 14:37 |
2020-07-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199680
|
7.8 |
HIGH
Local
|
schneider-electric
|
easergy_builder
|
A CWE-316: Cleartext Storage of Sensitive Information in Memory vulnerability exists in Easergy Builder V1.4.7.2 and prior which could allow an attacker access to login credentials.
|
-
|
CVE-2020-7516
|
2024-11-21 14:37 |
2020-07-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|