|
210941
|
6.7 |
MEDIUM
Local
|
docker
|
desktop
|
Docker Desktop allows local privilege escalation to NT AUTHORITY\SYSTEM because it mishandles the collection of diagnostics with Administrator privileges, leading to arbitrary DACL permissions overwr…
|
CWE-59
Link Following
|
CVE-2020-10665
|
2024-11-21 13:55 |
2020-03-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210942
|
4.3 |
MEDIUM
Network
|
entrustdatacard
|
entelligence_security_provider
|
Entrust Entelligence Security Provider (ESP) before 10.0.60 on Windows mishandles errors during SSL Certificate Validation, leading to situations where (for example) a user continues to interact with…
|
CWE-295
Improper Certificate Validation
|
CVE-2020-10659
|
2024-11-21 13:55 |
2020-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210943
|
5.4 |
MEDIUM
Network
|
opencart
|
opencart
|
OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section.
|
CWE-79
Cross-site Scripting
|
CVE-2020-10596
|
2024-11-21 13:55 |
2020-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210944
|
9.8 |
CRITICAL
Network
|
r-consortium
|
rmysql
|
RMySQL through 0.10.19 allows SQL Injection.
|
CWE-89
SQL Injection
|
CVE-2020-10380
|
2024-11-21 13:55 |
2020-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210945
|
9.8 |
CRITICAL
Network
|
joomla
|
joomla\!
|
An issue was discovered in Joomla! before 3.9.16. The lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the Featured Articles frontend menutype.
|
CWE-89
SQL Injection
|
CVE-2020-10243
|
2024-11-21 13:55 |
2020-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210946
|
6.1 |
MEDIUM
Network
|
joomla
|
joomla\!
|
An issue was discovered in Joomla! before 3.9.16. Inadequate handling of CSS selectors in the Protostar and Beez3 JavaScript allows XSS attacks.
|
CWE-79
Cross-site Scripting
|
CVE-2020-10242
|
2024-11-21 13:55 |
2020-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210947
|
8.8 |
HIGH
Network
|
joomla
|
joomla\!
|
An issue was discovered in Joomla! before 3.9.16. Missing token checks in the image actions of com_templates lead to CSRF.
|
CWE-352
Origin Validation Error
|
CVE-2020-10241
|
2024-11-21 13:55 |
2020-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210948
|
5.3 |
MEDIUM
Network
|
joomla
|
joomla\!
|
An issue was discovered in Joomla! before 3.9.16. Missing length checks in the user table can lead to the creation of users with duplicate usernames and/or email addresses.
|
CWE-20
Improper Input Validation
|
CVE-2020-10240
|
2024-11-21 13:55 |
2020-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210949
|
8.8 |
HIGH
Network
|
joomla
|
joomla\!
|
An issue was discovered in Joomla! before 3.9.16. Incorrect Access Control in the SQL fieldtype of com_fields allows access for non-superadmin users.
|
CWE-863
Incorrect Authorization
|
CVE-2020-10239
|
2024-11-21 13:55 |
2020-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210950
|
7.5 |
HIGH
Network
|
joomla
|
joomla\!
|
An issue was discovered in Joomla! before 3.9.16. Various actions in com_templates lack the required ACL checks, leading to various potential attack vectors.
|
CWE-668
Exposure of Resource to Wrong Sphere
|
CVE-2020-10238
|
2024-11-21 13:55 |
2020-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|