|
211221
|
9.8 |
CRITICAL
Network
|
flamecms_project
|
flamecms
|
FlameCMS 3.3.5 contains a time-based blind SQL injection vulnerability in /account/register.php.
|
CWE-89
SQL Injection
|
CVE-2020-20797
|
2024-11-21 14:12 |
2021-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211222
|
9.8 |
CRITICAL
Network
|
flamecms_project
|
flamecms
|
FlameCMS 3.3.5 contains a SQL injection vulnerability in /master/article.php via the "Id" parameter.
|
CWE-89
SQL Injection
|
CVE-2020-20796
|
2024-11-21 14:12 |
2021-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211223
|
7.2 |
HIGH
Network
|
tendacn
|
ac9_firmware
|
A stack-based buffer overflow in the httpd server on Tenda AC9 V15.03.06.60_EN allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via a crafted POST request to /gofo…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-20746
|
2024-11-21 14:12 |
2021-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211224
|
7.5 |
HIGH
Network
|
rudp_project
|
rudp
|
rudp v0.6 was discovered to contain a memory leak in the component main.c.
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2020-20665
|
2024-11-21 14:12 |
2021-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211225
|
6.5 |
MEDIUM
Network
|
libiec_iccp_mod_project
|
libiec_iccp_mod
|
libiec_iccp_mod v1.5 contains a segmentation violation in the component server_example1.c.
|
NVD-CWE-noinfo
|
CVE-2020-20664
|
2024-11-21 14:12 |
2021-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211226
|
6.5 |
MEDIUM
Network
|
libiec_iccp_mod_project
|
libiec_iccp_mod
|
libiec_iccp_mod v1.5 contains a heap-buffer-overflow in the component mms_client_connection.c.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-20663
|
2024-11-21 14:12 |
2021-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211227
|
6.5 |
MEDIUM
Network
|
libiec_iccp_mod_project
|
libiec_iccp_mod
|
libiec_iccp_mod v1.5 contains a heap-buffer-overflow in the component mms_client_example1.c.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-20662
|
2024-11-21 14:12 |
2021-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211228
|
5.4 |
MEDIUM
Network
|
ucms_project
|
ucms
|
A stored cross-site scripting (XSS) vulnerability in /ucms/index.php?do=list_edit of UCMS 1.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title, key words…
|
CWE-79
Cross-site Scripting
|
CVE-2020-20781
|
2024-11-21 14:12 |
2021-09-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211229
|
5.4 |
MEDIUM
Network
|
gilacms
|
gila_cms
|
A cross-site scripting (XSS) vulnerability in /admin/content/post of GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Tags field.
|
CWE-79
Cross-site Scripting
|
CVE-2020-20696
|
2024-11-21 14:12 |
2021-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211230
|
5.4 |
MEDIUM
Network
|
gilacms
|
gila_cms
|
A stored cross-site scripting (XSS) vulnerability in GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file.
|
CWE-79
Cross-site Scripting
|
CVE-2020-20695
|
2024-11-21 14:12 |
2021-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|