|
197971
|
8.8 |
HIGH
Network
|
aomedia
|
aomedia
|
AOM v2.0.1 was discovered to contain a global buffer overflow via the component av1/encoder/partition_search.h.
|
CWE-120
Classic Buffer Overflow
|
CVE-2020-36133
|
2024-11-21 14:28 |
2021-12-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197972
|
8.8 |
HIGH
Network
|
aomedia
|
aomedia
|
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-36131
|
2024-11-21 14:28 |
2021-12-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197973
|
6.5 |
MEDIUM
Network
|
aomedia
|
aomedia
|
AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-36130
|
2024-11-21 14:28 |
2021-12-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197974
|
8.8 |
HIGH
Network
|
aomedia
|
aomedia
|
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-36129
|
2024-11-21 14:28 |
2021-12-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197975
|
9.8 |
CRITICAL
Network
|
water_billing_system_project
|
water_billing_system
|
SQL injection vulnerability in SourceCodester Water Billing System 1.0 via the id parameter to edituser.php.
|
CWE-89
SQL Injection
|
CVE-2020-36033
|
2024-11-21 14:28 |
2021-07-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197976
|
5.4 |
MEDIUM
Network
|
rukovoditel
|
rukovoditel
|
A stored cross site scripting (XSS) vulnerability in the 'Entities List' feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload ent…
|
CWE-79
Cross-site Scripting
|
CVE-2020-35987
|
2024-11-21 14:28 |
2021-07-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197977
|
5.4 |
MEDIUM
Network
|
rukovoditel
|
rukovoditel
|
A stored cross site scripting (XSS) vulnerability in the 'Users Access Groups' feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted paylo…
|
CWE-79
Cross-site Scripting
|
CVE-2020-35986
|
2024-11-21 14:28 |
2021-07-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197978
|
5.4 |
MEDIUM
Network
|
rukovoditel
|
rukovoditel
|
A stored cross site scripting (XSS) vulnerability in the 'Global Lists" feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload ente…
|
CWE-79
Cross-site Scripting
|
CVE-2020-35985
|
2024-11-21 14:28 |
2021-07-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197979
|
5.4 |
MEDIUM
Network
|
rukovoditel
|
rukovoditel
|
A stored cross site scripting (XSS) vulnerability in the 'Users Alerts' feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload ente…
|
CWE-79
Cross-site Scripting
|
CVE-2020-35984
|
2024-11-21 14:28 |
2021-07-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197980
|
6.1 |
MEDIUM
Network
|
qnap
|
qulog_center
|
A stored XSS vulnerability has been reported to affect QNAP NAS running QuLog Center. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc.…
|
CWE-79
Cross-site Scripting
|
CVE-2020-36196
|
2024-11-21 14:28 |
2021-07-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|