|
212021
|
7.8 |
HIGH
Local
|
flowpaper
|
pdf2json
|
Buffer overflow in pdf2json 0.69 allows local users to execute arbitrary code by converting a crafted PDF file.
|
CWE-120
Classic Buffer Overflow
|
CVE-2020-18750
|
2024-11-21 14:08 |
2021-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212022
|
6.1 |
MEDIUM
Network
|
typora
|
typora
|
An issue was discovered in Typora 0.9.67. There is an XSS vulnerability that causes Remote Code Execution.
|
CWE-79
Cross-site Scripting
|
CVE-2020-18737
|
2024-11-21 14:08 |
2021-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212023
|
9.8 |
CRITICAL
Network
|
zzzcms
|
zzzphp
|
SQL Injection in ZZZCMS zzzphp 1.7.1 allows remote attackers to execute arbitrary code due to a lack of parameter filtering in inc/zzz_template.php.
|
CWE-89
SQL Injection
|
CVE-2020-18717
|
2024-11-21 14:08 |
2021-02-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212024
|
9.8 |
CRITICAL
Network
|
rockoa
|
rockoa
|
SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordAction.php.
|
CWE-89
SQL Injection
|
CVE-2020-18716
|
2024-11-21 14:08 |
2021-02-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212025
|
9.8 |
CRITICAL
Network
|
rockoa
|
rockoa
|
SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordModel.php's getdata function.
|
CWE-89
SQL Injection
|
CVE-2020-18714
|
2024-11-21 14:08 |
2021-02-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212026
|
9.8 |
CRITICAL
Network
|
rockoa
|
rockoa
|
SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in customerAction.php
|
CWE-89
SQL Injection
|
CVE-2020-18713
|
2024-11-21 14:08 |
2021-02-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212027
|
5.4 |
MEDIUM
Network
|
altn
|
mdaemon_webmail
|
Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an attacker to executes code and perform a XSS attack while opening…
|
CWE-79
Cross-site Scripting
|
CVE-2020-18724
|
2024-11-21 14:08 |
2021-02-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212028
|
5.4 |
MEDIUM
Network
|
altn
|
mdaemon_webmail
|
Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email recipient side while forwarding an email to perform potentially ma…
|
CWE-79
Cross-site Scripting
|
CVE-2020-18723
|
2024-11-21 14:08 |
2021-02-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212029
|
9.8 |
CRITICAL
Network
|
apache
|
shiro
|
Apache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.
|
CWE-287
Improper Authentication
|
CVE-2020-17523
|
2024-11-21 14:08 |
2021-02-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212030
|
7.5 |
HIGH
Network
|
apache
|
cassandra
|
Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, 3.0.0 to 3.0.23, and 3.11.0 to 3.11.9, when using 'dc' or 'rack' internode_encryption setting, allows both encrypted and unencrypted intern…
|
CWE-290
Authentication Bypass by Spoofing
|
CVE-2020-17516
|
2024-11-21 14:08 |
2021-02-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|