|
211211
|
5.4 |
MEDIUM
Network
|
mm-wiki_project
|
mm-wiki
|
Cross Site Scripting vulnerability found in Phachon mm-wiki v.0.1.2 allows a remote attacker to execute arbitrary code via javascript code in the markdown editor.
|
CWE-79
Cross-site Scripting
|
CVE-2020-19277
|
2024-11-21 14:09 |
2023-04-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211212
|
8.8 |
HIGH
Network
|
cszcms
|
csz_cms
|
File upload vulnerability in CSKaza CSZ CMS v.1.2.2 fixed in v1.2.4 allows attacker to execute aritrary commands and code via crafted PHP file.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-19786
|
2024-11-21 14:09 |
2023-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211213
|
7.0 |
HIGH
Local
|
mpv
|
mpv
|
An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash program via the ao_c parameter.
|
CWE-362
Race Condition
|
CVE-2020-19824
|
2024-11-21 14:09 |
2023-02-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211214
|
9.6 |
CRITICAL
Network
|
kimai
|
kimai
|
Cross Site Scripting (XSS) vulnerability in kevinpapst kimai2 1.30.0 in /src/Twig/Runtime/MarkdownExtension.php, allows attackers to gain escalated privileges.
|
CWE-79
Cross-site Scripting
|
CVE-2020-19825
|
2024-11-21 14:09 |
2023-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211215
|
5.4 |
MEDIUM
Network
|
idera
|
yellowfin_business_intelligence
|
Cross Site Scripting (XSS) vulnerability in configMap parameters in Yellowfin Business Intelligence 7.3 allows remote attackers to run arbitrary code via MIAdminStyles.i4 Admin UI.
|
CWE-79
Cross-site Scripting
|
CVE-2020-19587
|
2024-11-21 14:09 |
2022-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211216
|
9.0 |
CRITICAL
Network
|
yellowfinbi
|
business_intelligence
|
Incorrect Access Control issue in Yellowfin Business Intelligence 7.3 allows remote attackers to escalate privilege via MIAdminStyles.i4 Admin UI.
|
CWE-79
Cross-site Scripting
|
CVE-2020-19586
|
2024-11-21 14:09 |
2022-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211217
|
6.1 |
MEDIUM
Network
|
xiuno
|
xiunobbs
|
Cross Site Scripting (XSS) in xiunobbs 4.0.4 allows remote attackers to execute arbitrary web script or HTML via the attachment upload function.
|
CWE-79
Cross-site Scripting
|
CVE-2020-19914
|
2024-11-21 14:09 |
2022-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211218
|
6.1 |
MEDIUM
Network
|
wuzhicms
|
wuzhi_cms
|
A reflected Cross Site Scripting (XSS) in wuzhicms v4.1.0 allows remote attackers to execute arbitrary web script or HTML via the imgurl parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2020-19897
|
2024-11-21 14:09 |
2022-06-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211219
|
9.8 |
CRITICAL
Network
|
1234n
|
minicms
|
File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code via post-edit.php.
|
NVD-CWE-Other
|
CVE-2020-19896
|
2024-11-21 14:09 |
2022-06-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211220
|
7.2 |
HIGH
Network
|
bludit
|
bludit
|
An issue was found in bludit v3.13.0, unsafe implementation of the backup plugin allows attackers to upload arbitrary files.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-19228
|
2024-11-21 14:09 |
2022-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|