|
199711
|
8.8 |
HIGH
Network
|
plone
|
plone
|
Plone before 5.2.3 allows XXE attacks via a feature that is explicitly only available to the Manager role.
|
CWE-611
XXE
|
CVE-2020-28734
|
2024-11-21 14:23 |
2020-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199712
|
5.4 |
MEDIUM
Network
|
wondercms
|
wondercms
|
WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Page description component. This vulnerability can allow an attacker to inject the XSS payload in the Page description and each time a…
|
CWE-79
Cross-site Scripting
|
CVE-2020-29233
|
2024-11-21 14:23 |
2020-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199713
|
6.5 |
MEDIUM
Network
|
tag_project
|
tag
|
dhowden tag before 2020-11-19 allows "panic: runtime error: slice bounds out of range" via readAtomData.
|
CWE-129
Improper Validation of Array Index
|
CVE-2020-29245
|
2024-11-21 14:23 |
2020-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199714
|
6.5 |
MEDIUM
Network
|
tag_project
|
tag
|
dhowden tag before 2020-11-19 allows "panic: runtime error: slice bounds out of range" via readTextWithDescrFrame.
|
CWE-129
Improper Validation of Array Index
|
CVE-2020-29244
|
2024-11-21 14:23 |
2020-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199715
|
6.5 |
MEDIUM
Network
|
tag_project
|
tag
|
dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readAPICFrame.
|
CWE-129
Improper Validation of Array Index
|
CVE-2020-29243
|
2024-11-21 14:23 |
2020-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199716
|
6.5 |
MEDIUM
Network
|
tag_project
|
tag
|
dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readPICFrame.
|
CWE-129
Improper Validation of Array Index
|
CVE-2020-29242
|
2024-11-21 14:23 |
2020-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199717
|
7.5 |
HIGH
Network
|
zammad
|
zammad
|
An issue was discovered in Zammad before 3.5.1. A REST API call allows an attacker to change Ticket Article data in a way that defeats auditing.
|
CWE-862
Missing Authorization
|
CVE-2020-29160
|
2024-11-21 14:23 |
2020-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199718
|
4.9 |
MEDIUM
Network
|
zammad
|
zammad
|
An issue was discovered in Zammad before 3.5.1. The default signup Role (for newly created Users) can be a privileged Role, if configured by an admin. This behvaior was unintended.
|
NVD-CWE-noinfo
|
CVE-2020-29159
|
2024-11-21 14:23 |
2020-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199719
|
4.3 |
MEDIUM
Network
|
zammad
|
zammad
|
An issue was discovered in Zammad before 3.5.1. An Agent with Customer permissions in a Group can bypass intended access control on internal Articles via the Ticket detail view.
|
CWE-862
Missing Authorization
|
CVE-2020-29158
|
2024-11-21 14:23 |
2020-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199720
|
7.5 |
HIGH
Network
|
panasonic
|
wv-s2231l_firmware
|
Panasonic Security System WV-S2231L 4.25 allows a denial of service of the admin control panel (which will require a physical reset to restore administrative control) via Randomnum=99AC8CEC6E845B28&m…
|
NVD-CWE-noinfo
|
CVE-2020-29194
|
2024-11-21 14:23 |
2020-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|