|
197891
|
6.5 |
MEDIUM
Network
|
delete_all_comments_easily_project
|
delete_all_comments_easily
|
The Delete All Comments Easily WordPress plugin through 1.3 is lacking Cross-Site Request Forgery (CSRF) checks, which could result in an unauthenticated attacker making a logged in admin delete all …
|
-
|
CVE-2020-36505
|
2024-11-21 14:29 |
2021-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197892
|
6.5 |
MEDIUM
Network
|
wp-pro-quiz_project
|
wp-pro-quiz
|
The WP-Pro-Quiz WordPress plugin through 0.37 does not have CSRF check in place when deleting a quiz, which could allow an attacker to make a logged in admin delete arbitrary quiz on the blog
|
-
|
CVE-2020-36504
|
2024-11-21 14:29 |
2021-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197893
|
8.0 |
HIGH
Network
|
connections-pro
|
connections_business_directory
|
The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields, which could lead to a CSV injection issue
|
-
|
CVE-2020-36503
|
2024-11-21 14:29 |
2021-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197894
|
9.8 |
CRITICAL
Network
|
aaptjs_project
|
aaptjs
|
An issue was discovered in the singleCrunch function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.
|
CWE-78
OS Command
|
CVE-2020-36381
|
2024-11-21 14:29 |
2021-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197895
|
9.8 |
CRITICAL
Network
|
aaptjs_project
|
aaptjs
|
An issue was discovered in the crunch function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.
|
CWE-78
OS Command
|
CVE-2020-36380
|
2024-11-21 14:29 |
2021-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197896
|
9.8 |
CRITICAL
Network
|
aaptjs_project
|
aaptjs
|
An issue was discovered in the remove function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.
|
CWE-78
OS Command
|
CVE-2020-36379
|
2024-11-21 14:29 |
2021-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197897
|
9.8 |
CRITICAL
Network
|
aaptjs_project
|
aaptjs
|
An issue was discovered in the packageCmd function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.
|
CWE-78
OS Command
|
CVE-2020-36378
|
2024-11-21 14:29 |
2021-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197898
|
9.8 |
CRITICAL
Network
|
aaptjs_project
|
aaptjs
|
An issue was discovered in the dump function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.
|
CWE-78
OS Command
|
CVE-2020-36377
|
2024-11-21 14:29 |
2021-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197899
|
9.8 |
CRITICAL
Network
|
aaptjs_project
|
aaptjs
|
An issue was discovered in the list function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.
|
CWE-78
OS Command
|
CVE-2020-36376
|
2024-11-21 14:29 |
2021-11-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197900
|
6.1 |
MEDIUM
Network
|
swiftfiletransfer
|
swift_file_transfer
|
Swift File Transfer Mobile v1.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the devicename parameter which allows attackers to execute arbitrary web scripts or HTML via…
|
CWE-79
Cross-site Scripting
|
CVE-2020-36502
|
2024-11-21 14:29 |
2021-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|