|
210711
|
8.8 |
HIGH
Network
|
pramod
|
blogcms
|
pramodmahato BlogCMS through 2019-12-31 has admin/changepass.php CSRF.
|
CWE-352
Origin Validation Error
|
CVE-2020-15014
|
2024-11-21 14:04 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210712
|
4.3 |
MEDIUM
Network
|
gnu canonical debian
|
mailman ubuntu_linux debian_linux
|
GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.
|
CWE-74
Injection
|
CVE-2020-15011
|
2024-11-21 14:04 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210713
|
9.8 |
CRITICAL
Network
|
idsoftware doom_vanille_project
|
tech_1 doom_vanille
|
A buffer overflow in the M_LoadDefaults function in m_misc.c in id Tech 1 (aka Doom engine) allows arbitrary code execution via an unsafe usage of fscanf, because it does not limit the number of char…
|
CWE-120
Classic Buffer Overflow
|
CVE-2020-15007
|
2024-11-21 14:04 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210714
|
5.4 |
MEDIUM
Network
|
bludit
|
bludit
|
Bludit 3.12.0 allows stored XSS via JavaScript code in an SVG document to bl-kernel/ajax/logo-upload.php.
|
CWE-79
Cross-site Scripting
|
CVE-2020-15006
|
2024-11-21 14:04 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210715
|
8.1 |
HIGH
Network
|
f-secure
|
safe
|
An issue was discovered in F-Secure SAFE 17.7 on macOS. Due to incorrect client version verification, an attacker can connect to a privileged XPC service, and execute privileged commands on the syste…
|
NVD-CWE-noinfo
|
CVE-2020-14978
|
2024-11-21 14:04 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210716
|
8.1 |
HIGH
Network
|
f-secure
|
safe
|
An issue was discovered in F-Secure SAFE 17.7 on macOS. The XPC services use the PID to identify the connecting client, which allows an attacker to perform a PID reuse attack and connect to a privile…
|
NVD-CWE-noinfo
|
CVE-2020-14977
|
2024-11-21 14:04 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210717
|
5.5 |
MEDIUM
Local
|
gns3
|
ubridge
|
GNS3 ubridge through 0.9.18 on macOS, as used in GNS3 server before 2.1.17, allows a local attacker to read arbitrary files because it handles configuration-file errors by printing the configuration …
|
CWE-269
Improper Privilege Management
|
CVE-2020-14976
|
2024-11-21 14:04 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210718
|
7.8 |
HIGH
Local
|
iobit
|
iobit_unlocker
|
The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to delete, move, or copy arbitrary files via IOCTL code 0x222124.
|
NVD-CWE-noinfo
|
CVE-2020-14975
|
2024-11-21 14:04 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210719
|
7.1 |
HIGH
Local
|
iobit
|
iobit_unlocker
|
The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to unlock a file and kill processes (even ones running as SYSTEM) that hold a handle, via IOCTL code 0x222124.
|
NVD-CWE-noinfo
|
CVE-2020-14974
|
2024-11-21 14:04 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210720
|
7.8 |
HIGH
Local
|
pi-hole
|
pi-hole
|
Pi-hole through 5.0 allows code injection in piholedhcp (the Static DHCP Leases section) by modifying Teleporter backup files and then restoring them. This occurs in settings.php. To exploit this, an…
|
CWE-862
Missing Authorization
|
CVE-2020-14971
|
2024-11-21 14:04 |
2020-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|