|
199881
|
7.5 |
HIGH
Network
|
cacagoo
|
tv-288zd-2mp_firmware
|
The CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 allows access to the RTSP service without a password.
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2020-9349
|
2024-11-21 14:40 |
2020-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199882
|
4.3 |
MEDIUM
Network
|
piwigo
|
piwigo
|
The Community plugin 2.9.e-beta for Piwigo allows users to set image information on images in albums for which they do not have permission, by manipulating the image_id parameter.
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2020-9468
|
2024-11-21 14:40 |
2020-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199883
|
5.4 |
MEDIUM
Network
|
piwigo
|
piwigo
|
Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function.
|
CWE-79
Cross-site Scripting
|
CVE-2020-9467
|
2024-11-21 14:40 |
2020-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199884
|
8.8 |
HIGH
Network
|
microfocus
|
service_manager_automation
|
An SQL injection vulnerability was discovered in Micro Focus Service Manager Automation (SMA), affecting versions 2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02. The vulnerability could allow f…
|
CWE-89
SQL Injection
|
CVE-2020-9521
|
2024-11-21 14:40 |
2020-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199885
|
5.4 |
MEDIUM
Network
|
microfocus
|
vibe
|
A stored XSS vulnerability was discovered in Micro Focus Vibe, affecting all Vibe version prior to 4.0.7. The vulnerability could allows a remote attacker to craft and store malicious content into Vi…
|
CWE-79
Cross-site Scripting
|
CVE-2020-9520
|
2024-11-21 14:40 |
2020-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199886
|
7.8 |
HIGH
Local
|
adobe
|
bridge
|
Adobe Bridge versions 10.0 have a heap-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-9552
|
2024-11-21 14:40 |
2020-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199887
|
7.8 |
HIGH
Local
|
adobe
|
bridge
|
Adobe Bridge versions 10.0 have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-9551
|
2024-11-21 14:40 |
2020-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199888
|
7.5 |
HIGH
Network
|
tp-link
|
archer_c50
|
TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a denial of service via a crafted HTTP Header containing an unexpected Referer field.
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2020-9375
|
2024-11-21 14:40 |
2020-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199889
|
5.3 |
MEDIUM
Local
|
kde debian fedoraproject
|
okular debian_linux fedora
|
KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.
|
NVD-CWE-noinfo
|
CVE-2020-9359
|
2024-11-21 14:40 |
2020-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199890
|
7.3 |
HIGH
Network
|
supsystic
|
pricing_table_by_supsystic
|
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. Because there is no permission check on the ImportJSONTable, createFromTpl, and getJSONExportTable endpoin…
|
CWE-276
Incorrect Default Permissions
|
CVE-2020-9392
|
2024-11-21 14:40 |
2020-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|