|
211391
|
7.5 |
HIGH
Network
|
zeroxracer_project
|
zeroxracer
|
A lack of target address verification in the destroycontract() function of 0xRACER 1.0 allows attackers to steal tokens from victim users via a crafted script.
|
NVD-CWE-noinfo
|
CVE-2020-19767
|
2024-11-21 14:09 |
2021-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211392
|
7.5 |
HIGH
Network
|
tokenerc20_project
|
tokenerc20
|
The time check operation of PepeAuctionSale 1.0 can be rendered ineffective by assigning a large number to the _duration variable, compromising access control to the application.
|
CWE-754
Improper Check for Unusual or Exceptional Conditions
|
CVE-2020-19766
|
2024-11-21 14:09 |
2021-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211393
|
7.5 |
HIGH
Network
|
proofofdiligencetoken_project
|
proofofdiligencetoken
|
An issue in the noReentrance() modifier of the Ethereum-based contract Accounting 1.0 allows attackers to carry out a reentrancy attack.
|
CWE-863
Incorrect Authorization
|
CVE-2020-19765
|
2024-11-21 14:09 |
2021-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211394
|
7.5 |
HIGH
Network
|
lcdf fedoraproject
|
gifsicle fedora
|
The find_color_or_error function in gifsicle 1.92 contains a NULL pointer dereference.
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-19752
|
2024-11-21 14:09 |
2021-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211395
|
9.1 |
CRITICAL
Network
|
gpac
|
gpac
|
An issue was discovered in gpac 0.8.0. The gf_odf_del_ipmp_tool function in odf_code.c has a heap-based buffer over-read.
|
CWE-125
Out-of-bounds Read
|
CVE-2020-19751
|
2024-11-21 14:09 |
2021-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211396
|
7.5 |
HIGH
Network
|
gpac
|
gpac
|
An issue was discovered in gpac 0.8.0. The strdup function in box_code_base.c has a heap-based buffer over-read.
|
CWE-125
Out-of-bounds Read
|
CVE-2020-19750
|
2024-11-21 14:09 |
2021-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211397
|
7.2 |
HIGH
Network
|
zzcms
|
zzcms
|
A remote code execution (RCE) vulnerability in template_user.php of ZZCMS version 2018 allows attackers to execute arbitrary PHP code via the "ml" and "title" parameters.
|
CWE-94
Code Injection
|
CVE-2020-19822
|
2024-11-21 14:09 |
2021-08-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211398
|
8.8 |
HIGH
Network
|
wdoyo
|
doyocms
|
A SQL injection vulnerability in admin.php of DOYOCMS 2.3 allows attackers to execute arbitrary SQL commands via the orders[] parameter.
|
CWE-89
SQL Injection
|
CVE-2020-19821
|
2024-11-21 14:09 |
2021-08-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211399
|
6.1 |
MEDIUM
Network
|
feehi
|
feehicms
|
Insufficient filtering of the tag parameters in feehicms 0.1.3 allows attackers to execute arbitrary web or HTML via a crafted payload.
|
CWE-79
Cross-site Scripting
|
CVE-2020-19709
|
2024-11-21 14:09 |
2021-08-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211400
|
9.8 |
CRITICAL
Network
|
thinkphp-zcms_project
|
thinkphp-zcms
|
thinkphp-zcms as of 20190715 allows SQL injection via index.php?m=home&c=message&a=add.
|
CWE-89
SQL Injection
|
CVE-2020-19705
|
2024-11-21 14:09 |
2021-08-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|