|
200021
|
7.5 |
HIGH
Network
|
three_project
|
three
|
This affects the package three before 0.125.0. This can happen when handling rgb or hsl colors. PoC: var three = require('three') function build_blank (n) { var ret = "rgb(" for (var i = 0; i < n; i+…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2020-28496
|
2024-11-21 14:22 |
2021-02-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200022
|
9.8 |
CRITICAL
Network
|
async-git_project
|
async-git
|
The package async-git before 1.13.2 are vulnerable to Command Injection via shell meta-characters (back-ticks). For example: git.reset('atouch HACKEDb')
|
CWE-78
OS Command
|
CVE-2020-28490
|
2024-11-21 14:22 |
2021-02-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200023
|
7.2 |
HIGH
Network
|
microweber
|
microweber
|
A directory traversal issue in the Utils/Unzip module in Microweber through 1.1.20 allows an authenticated attacker to gain remote code execution via the backup restore feature. To exploit the vulner…
|
CWE-22
Path Traversal
|
CVE-2020-28337
|
2024-11-21 14:22 |
2021-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200024
|
5.3 |
MEDIUM
Network
|
lodash oracle siemens
|
lodash primavera_unifier peoplesoft_enterprise_peopletools retail_customer_management_and_segmentation_foundation communications_services_gatekeeper enterprise_communications_broker
|
Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.
|
NVD-CWE-Other
|
CVE-2020-28500
|
2024-11-21 14:22 |
2021-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200025
|
7.8 |
HIGH
Local
|
prusa3d
|
prusaslicer
|
A stack-based buffer overflow vulnerability exists in the Objparser::objparse() functionality of Prusa Research PrusaSlicer 2.2.0 and Master (commit 4b040b856). A specially crafted obj file can lead …
|
CWE-787
Out-of-bounds Write
|
CVE-2020-28596
|
2024-11-21 14:22 |
2021-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200026
|
7.8 |
HIGH
Local
|
prusa3d
|
prusaslicer
|
An out-of-bounds write vulnerability exists in the Obj.cpp load_obj() functionality of Prusa Research PrusaSlicer 2.2.0 and Master (commit 4b040b856). A specially crafted obj file can lead to code ex…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-28595
|
2024-11-21 14:22 |
2021-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200027
|
5.5 |
MEDIUM
Local
|
siemens
|
jt2go teamcenter_visualization
|
A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when p…
|
-
|
CVE-2020-28394
|
2024-11-21 14:22 |
2021-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200028
|
7.8 |
HIGH
Local
|
siemens
|
simaris_configuration
|
A vulnerability has been identified in SIMARIS configuration (All versions < V4.0.1). During installation to default target folder, incorrect permissions are configured for the application folder and…
|
-
|
CVE-2020-28392
|
2024-11-21 14:22 |
2021-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200029
|
5.3 |
MEDIUM
Network
|
siemens
|
nucleus_source_code nucleus_net capital_vstar pluscontrol_1st_gen nucleus_readystart
|
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5…
|
NVD-CWE-Other
|
CVE-2020-28388
|
2024-11-21 14:22 |
2021-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200030
|
8.6 |
HIGH
Network
|
decal_project
|
decal
|
This affects all versions of package decal. The vulnerability is in the extend function.
|
NVD-CWE-Other
|
CVE-2020-28450
|
2024-11-21 14:22 |
2021-02-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|