|
198691
|
3.3 |
LOW
Local
|
symantec
|
endpoint_protection_manager
|
Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of t…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-5833
|
2024-11-21 14:34 |
2020-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198692
|
7.8 |
HIGH
Local
|
jalinfotec
|
pallet_control
|
Improper Access Control in PALLET CONTROL Ver. 6.3 and earlier allows authenticated attackers to execute arbitrary code with the SYSTEM privilege on the computer where PALLET CONTROL is installed via…
|
NVD-CWE-noinfo
|
CVE-2020-5538
|
2024-11-21 14:34 |
2020-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198693
|
7.2 |
HIGH
Network
|
plex
|
media_server
|
Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arbitrary Python code.
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2020-5741
|
2024-11-21 14:34 |
2020-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198694
|
5.4 |
MEDIUM
Network
|
tecnick
|
tcexam
|
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted operator.
|
CWE-79
Cross-site Scripting
|
CVE-2020-5751
|
2024-11-21 14:34 |
2020-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198695
|
6.1 |
MEDIUM
Network
|
tecnick
|
tcexam
|
Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks via the self-registration feature.
|
CWE-79
Cross-site Scripting
|
CVE-2020-5750
|
2024-11-21 14:34 |
2020-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198696
|
5.4 |
MEDIUM
Network
|
tecnick
|
tcexam
|
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted group.
|
CWE-79
Cross-site Scripting
|
CVE-2020-5749
|
2024-11-21 14:34 |
2020-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198697
|
6.1 |
MEDIUM
Network
|
tecnick
|
tcexam
|
Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks via the self-registration feature.
|
CWE-79
Cross-site Scripting
|
CVE-2020-5748
|
2024-11-21 14:34 |
2020-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198698
|
5.4 |
MEDIUM
Network
|
tecnick
|
tcexam
|
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted test.
|
CWE-79
Cross-site Scripting
|
CVE-2020-5747
|
2024-11-21 14:34 |
2020-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198699
|
5.4 |
MEDIUM
Network
|
tecnick
|
tcexam
|
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted test.
|
CWE-79
Cross-site Scripting
|
CVE-2020-5746
|
2024-11-21 14:34 |
2020-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198700
|
7.4 |
HIGH
Network
|
tecnick
|
tcexam
|
Cross-site request forgery in TCExam 14.2.2 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link.
|
CWE-352
Origin Validation Error
|
CVE-2020-5745
|
2024-11-21 14:34 |
2020-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|