|
196641
|
6.1 |
MEDIUM
Network
|
docsifyjs
|
docsify
|
docsify prior to 4.11.4 is susceptible to Cross-site Scripting (XSS). Docsify.js uses fragment identifiers (parameters after # sign) to load resources from server-side .md files. Due to lack of valid…
|
CWE-79
Cross-site Scripting
|
CVE-2020-7680
|
2024-11-21 14:37 |
2020-07-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196642
|
7.8 |
HIGH
Local
|
hmtalk
|
daviewindy
|
DaviewIndy 8.98.9 and earlier has a Heap-based overflow vulnerability, triggered when the user opens a malformed PDF file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary …
|
CWE-787
Out-of-bounds Write
|
CVE-2020-7818
|
2024-11-21 14:37 |
2020-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196643
|
9.8 |
CRITICAL
Network
|
eyesurfer
|
bflyinstallerx.ocx
|
EyeSurfer BflyInstallerX.ocx v1.0.0.16 and earlier versions contain a vulnerability that could allow remote files to be download by setting the arguments to the vulnerable method. This can be leverag…
|
CWE-494
Download of Code Without Integrity Check
|
CVE-2020-7826
|
2024-11-21 14:37 |
2020-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196644
|
9.8 |
CRITICAL
Network
|
tobesoft
|
miplatform
|
A vulnerability exists that could allow the execution of operating system commands on systems running MiPlatform 2019.05.16 and earlier. An attacker could execute arbitrary remote command by sending …
|
CWE-78
OS Command
|
CVE-2020-7825
|
2024-11-21 14:37 |
2020-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196645
|
5.3 |
MEDIUM
Network
|
react-native-fast-image_project
|
react-native-fast-image
|
This affects all versions of package react-native-fast-image. When an image with source={{uri: "...", headers: { host: "somehost.com", authorization: "..." }} is loaded, all other subsequent images w…
|
CWE-200
Information Exposure
|
CVE-2020-7696
|
2024-11-21 14:37 |
2020-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196646
|
9.8 |
CRITICAL
Network
|
rollup-plugin-serve_project
|
rollup-plugin-serve
|
This affects all versions of package rollup-plugin-serve. There is no path sanitization in readFile operation.
|
CWE-22
Path Traversal
|
CVE-2020-7684
|
2024-11-21 14:37 |
2020-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196647
|
4.3 |
MEDIUM
Network
|
mcafee
|
web_gateway
|
Inappropriate Encoding for output context vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows a remote attacker to cause MWG to return an ambiguous redirect response via getting a user to…
|
CWE-838
Inappropriate Encoding for Output Context
|
CVE-2020-7292
|
2024-11-21 14:37 |
2020-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196648
|
9.8 |
CRITICAL
Network
|
siemens
|
logo\!_8_bm_firmware
|
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (V1.81.01 - V1.81.03), LOGO! 8 BM (incl. SIPLUS variants) (V1.82.01), LOGO! 8 BM (incl. SIPLUS variants) (V1.82.02). A buffer…
|
CWE-120
Classic Buffer Overflow
|
CVE-2020-7593
|
2024-11-21 14:37 |
2020-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196649
|
7.5 |
HIGH
Network
|
siemens
|
simatic_s7-200_smart_sr_cpu_firmware simatic_s7-200_smart_st_cpu_firmware
|
A vulnerability has been identified in SIMATIC S7-200 SMART CPU family (All versions >= V2.2 < V2.5.1). Affected devices do not properly handle large numbers of new incomming connections and could cr…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2020-7584
|
2024-11-21 14:37 |
2020-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196650
|
6.5 |
MEDIUM
Adjacent
|
siemens
|
simatic_wincc_runtime_advanced simatic_hmi_basic_panels_1st_generation simatic_hmi_basic_panels_2nd_generation simatic_hmi_comfort_panels_firmware simatic_hmi_ktp700f_mobile_arctic_firmwa…
|
A vulnerability has been identified in SIMATIC HMI Basic Panels 1st Generation (incl. SIPLUS variants) (All versions), SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants) (All versions), …
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2020-7592
|
2024-11-21 14:37 |
2020-07-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|