|
209561
|
6.5 |
MEDIUM
Network
|
exiv2
|
exiv2
|
An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service (DOS) via a crafted tif file.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-18773
|
2024-11-21 14:08 |
2021-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209562
|
8.1 |
HIGH
Network
|
exiv2 debian
|
exiv2 debian_linux
|
Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmn_int.cpp which can result in an information leak.
|
CWE-125
Out-of-bounds Read
|
CVE-2020-18771
|
2024-11-21 14:08 |
2021-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209563
|
7.5 |
HIGH
Network
|
eclipse
|
cyclone_data_distribution_service
|
A heap buffer overflow in /src/dds_stream.c of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-18735
|
2024-11-21 14:08 |
2021-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209564
|
7.5 |
HIGH
Network
|
eclipse
|
cyclone_data_distribution_service
|
A stack buffer overflow in /ddsi/q_bitset.h of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-18734
|
2024-11-21 14:08 |
2021-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209565
|
7.5 |
HIGH
Network
|
iec104_project
|
iec104
|
A segmentation violation in the Iec104_Deal_FirmUpdate function of IEC104 v1.0 allows attackers to cause a denial of service (DOS).
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-18731
|
2024-11-21 14:08 |
2021-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209566
|
7.5 |
HIGH
Network
|
iec104_project
|
iec104
|
A segmentation violation in the Iec104_Deal_I function of IEC104 v1.0 allows attackers to cause a denial of service (DOS).
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-18730
|
2024-11-21 14:08 |
2021-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209567
|
7.2 |
HIGH
Network
|
phpmywind
|
phpmywind
|
Unrestricted File Upload in PHPMyWind v5.6 allows remote attackers to execute arbitrary code via the component 'admin/upload_file_do.php'.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-18886
|
2024-11-21 14:08 |
2021-08-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209568
|
7.2 |
HIGH
Network
|
phpmywind
|
phpmywind
|
Command Injection in PHPMyWind v5.6 allows remote attackers to execute arbitrary code via the "text color" field of the component '/admin/web_config.php'.
|
CWE-77
Command Injection
|
CVE-2020-18885
|
2024-11-21 14:08 |
2021-08-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209569
|
9.8 |
CRITICAL
Network
|
bludit
|
bludit
|
Unrestricted File Upload in Bludit v3.8.1 allows remote attackers to execute arbitrary code by uploading malicious files via the component 'bl-kereln/ajax/upload-logo.php'.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-18879
|
2024-11-21 14:08 |
2021-08-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209570
|
5.3 |
MEDIUM
Network
|
skycaiji
|
skycaiji
|
Directory Traversal in Skycaiji v1.3 allows remote attackers to obtain sensitive information via the component 'index.php?m=admin&c=Tool&a=log&file=D%3A%5CphpStudy%5CWWW%5Cindex.php'.
|
CWE-22
Path Traversal
|
CVE-2020-18878
|
2024-11-21 14:08 |
2021-08-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|