|
218201
|
6.1 |
MEDIUM
Network
|
codiad
|
codiad
|
** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Site Scripting (XSS) vulnerability was found in Codiad v1.7.8 and later. The vulnerability occurs because of improper sanitization of the folder's na…
|
CWE-79
Cross-site Scripting
|
CVE-2020-14042
|
2024-11-21 14:02 |
2020-08-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218202
|
7.2 |
HIGH
Network
|
codiad
|
codiad
|
** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Server-Side Request Forgery (SSRF) vulnerability was found in Codiad v1.7.8 and later. A user with admin privileges could use the plugin install feature to…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2020-14044
|
2024-11-21 14:02 |
2020-08-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218203
|
8.8 |
HIGH
Network
|
codiad
|
codiad
|
** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Side Request Forgery (CSRF) vulnerability was found in Codiad v1.7.8 and later. The request to download a plugin from the marketplace is only availab…
|
CWE-352
Origin Validation Error
|
CVE-2020-14043
|
2024-11-21 14:02 |
2020-08-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218204
|
6.5 |
MEDIUM
Network
|
dolibarr
|
dolibarr
|
Dolibarr CRM before 11.0.5 allows privilege escalation. This could allow remote authenticated attackers to upload arbitrary files via societe/document.php in which "disabled" is changed to "enabled" …
|
NVD-CWE-noinfo
|
CVE-2020-14201
|
2024-11-21 14:02 |
2020-08-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218205
|
7.5 |
HIGH
Network
|
zulip
|
zulip_server
|
Zulip Server before 2.1.5 has Incorrect Access Control because 0198_preregistrationuser_invited_as adds the administrator role to invitations.
|
CWE-269
Improper Privilege Management
|
CVE-2020-14215
|
2024-11-21 14:02 |
2020-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218206
|
5.4 |
MEDIUM
Network
|
zulip
|
zulip_server
|
Zulip Server before 2.1.5 allows reverse tabnapping via a topic header link.
|
CWE-269
Improper Privilege Management
|
CVE-2020-14194
|
2024-11-21 14:02 |
2020-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218207
|
7.5 |
HIGH
Network
|
apache debian
|
shiro debian_linux
|
Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass.
|
NVD-CWE-noinfo
|
CVE-2020-13933
|
2024-11-21 14:02 |
2020-08-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218208
|
8.8 |
HIGH
Network
|
apache
|
solr
|
Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0. The Replication handler (https://lucene.apache.org/solr/guide/8_6/index-replication.html#http-api-co…
|
CWE-20
Improper Input Validation
|
CVE-2020-13941
|
2024-11-21 14:02 |
2020-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218209
|
4.3 |
MEDIUM
Network
|
redhat
|
quay
|
An information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1. This flaw allows an attacker who can create a build trigger in a repository, to disclose the names of robot…
|
NVD-CWE-noinfo
|
CVE-2020-14313
|
2024-11-21 14:02 |
2020-08-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218210
|
7.1 |
HIGH
Network
|
redhat
|
cloudforms_management_engine
|
Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw. With the access to add Ansible Tower provider, an attacker could scan and attack systems from the internal netw…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2020-14296
|
2024-11-21 14:02 |
2020-08-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|