|
199641
|
6.1 |
MEDIUM
Network
|
hrsale
|
hrsale
|
HRSALE 2.0.0 allows XSS via the admin/project/projects_calendar set_date parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2020-29053
|
2024-11-21 14:23 |
2020-11-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199642
|
9.8 |
CRITICAL
Network
|
cdatatec cdata
|
72408a_firmware 9008a_firmware 9016a_firmware 92408a_firmware 92416a_firmware 9288_firmware 97016_firmware 97024p_firmware 97028p_firmware 97042p_firmware 97084p_firmwar…
|
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN,…
|
CWE-78
OS Command
|
CVE-2020-29056
|
2024-11-21 14:23 |
2020-11-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199643
|
5.9 |
MEDIUM
Network
|
cdatatec
|
72408a_firmware 9008a_firmware 9016a_firmware 92408a_firmware 92416a_firmware 9288_firmware 97016_firmware 97024p_firmware 97028p_firmware 97042p_firmware 97084p_firmwar…
|
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN,…
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2020-29055
|
2024-11-21 14:23 |
2020-11-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199644
|
9.8 |
CRITICAL
Network
|
cdatatec
|
72408a_firmware 9008a_firmware 9016a_firmware 92408a_firmware 92416a_firmware 9288_firmware 97016_firmware 97024p_firmware 97028p_firmware 97042p_firmware 97084p_firmwar…
|
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN,…
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2020-29054
|
2024-11-21 14:23 |
2020-11-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199645
|
9.8 |
CRITICAL
Network
|
karenderia_multiple_restaurant_system_project
|
karenderia_multiple_restaurant_system
|
A SQL injection vulnerability was discovered in Karenderia Multiple Restaurant System, affecting versions 5.4.2 and below. The vulnerability allows for an unauthenticated attacker to perform various …
|
CWE-89
SQL Injection
|
CVE-2020-28994
|
2024-11-21 14:23 |
2020-11-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199646
|
5.5 |
MEDIUM
Local
|
musl-libc debian fedoraproject oracle
|
musl debian_linux fedora graalvm
|
In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).
|
CWE-787
Out-of-bounds Write
|
CVE-2020-28928
|
2024-11-21 14:23 |
2020-11-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199647
|
8.8 |
HIGH
Local
|
xen
|
xen
|
An issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial of service (stack corruption), cause a data leak, or possibly gain privileges because of an off-by-one …
|
CWE-787 CWE-193
Out-of-bounds Write Off-by-one Error
|
CVE-2020-29040
|
2024-11-21 14:23 |
2020-11-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199648
|
6.1 |
MEDIUM
Network
|
seeddms
|
seeddms
|
Open redirect in SeedDMS 6.0.13 via the dropfolderfileform1 parameter to out/out.AddDocument.php.
|
CWE-601
Open Redirect
|
CVE-2020-28726
|
2024-11-21 14:23 |
2020-11-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199649
|
9.8 |
CRITICAL
Network
|
misp
|
misp
|
MISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php and app/Model/GalaxyElement.php.
|
CWE-862
Missing Authorization
|
CVE-2020-29006
|
2024-11-21 14:23 |
2020-11-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199650
|
5.4 |
MEDIUM
Network
|
mediawiki
|
mediawiki
|
The PollNY extension for MediaWiki through 1.35 allows XSS via an answer option for a poll question, entered during Special:CreatePoll or Special:UpdatePoll.
|
CWE-79
Cross-site Scripting
|
CVE-2020-29003
|
2024-11-21 14:23 |
2020-11-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|