|
199561
|
9.8 |
CRITICAL
Network
|
easycorp
|
zentao
|
The EasyCorp ZenTao PMS 12.4.2 application suffers from an arbitrary file upload vulnerability. An attacker can upload arbitrary webshell to the server by using the downloadZipPackage() function.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-28165
|
2024-11-21 14:22 |
2021-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199562
|
8.8 |
HIGH
Network
|
tinyobjloader_project
|
tinyobjloader
|
An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to cod…
|
CWE-129
Improper Validation of Array Index
|
CVE-2020-28589
|
2024-11-21 14:22 |
2021-08-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199563
|
5.3 |
MEDIUM
Network
|
siemens
|
cpu_1504d_tf_firmware cpu_1507d_tf_firmware cpu_1515sp_pc2_tf_firmware simatic_s7_plcsim_advanced_firmware simatic_s7-1500_software_controller tim_1531_irc_firmware cpu_1211c_firmwa…
|
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC…
|
CWE-863
Incorrect Authorization
|
CVE-2020-28397
|
2024-11-21 14:22 |
2021-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199564
|
9.8 |
CRITICAL
Network
|
jeecg
|
jeecg_boot
|
An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-28088
|
2024-11-21 14:22 |
2021-08-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199565
|
7.5 |
HIGH
Network
|
jeecg
|
jeecg_boot
|
A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information.
|
CWE-89
SQL Injection
|
CVE-2020-28087
|
2024-11-21 14:22 |
2021-08-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199566
|
7.5 |
HIGH
Network
|
siemens
|
dk_standard_ethernet_controller_evaluation_kit_firmware ek-ertec_200_evaulation_kit_firmware ek-ertec_200p_evaluation_kit_firmware ruggedcom_rm1224_firmware scalance_m-800_firmware sca…
|
Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial-of-service condition. The vulnerability can be triggered if a large amount of DCP reset packets ar…
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2020-28400
|
2024-11-21 14:22 |
2021-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199567
|
7.8 |
HIGH
Local
|
prusa3d
|
prusaslicer
|
An out-of-bounds write vulnerability exists in the Admesh stl_fix_normal_directions() functionality of Prusa Research PrusaSlicer 2.2.0 and Master (commit 4b040b856). A specially crafted AMF file can…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-28598
|
2024-11-21 14:22 |
2021-07-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199568
|
4.3 |
MEDIUM
Network
|
dovecot fedoraproject
|
dovecot fedora
|
The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with a complex regular expression for the regex extension.
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2020-28200
|
2024-11-21 14:22 |
2021-06-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199569
|
5.9 |
MEDIUM
Physics
|
linux netapp
|
linux_kernel cloud_backup h410c_firmware h300s_firmware h500s_firmware h700s_firmware h300e_firmware h500e_firmware h700e_firmware h410s_firmware
|
The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. There is a vgacon_scrolldelta out-of-bounds read, aka CID-973c096f6a85.
|
CWE-125
Out-of-bounds Read
|
CVE-2020-28097
|
2024-11-21 14:22 |
2021-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199570
|
7.5 |
HIGH
Network
|
gulpjs oracle
|
glob-parent communications_cloud_native_core_policy
|
This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2020-28469
|
2024-11-21 14:22 |
2021-06-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|