|
213621
|
6.5 |
MEDIUM
Network
|
playsms
|
playsms
|
playSMS through 1.4.3 is vulnerable to session fixation.
|
CWE-384
Session Fixation
|
CVE-2020-15018
|
2024-11-21 14:04 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213622
|
8.8 |
HIGH
Network
|
pramod
|
blogcms
|
pramodmahato BlogCMS through 2019-12-31 has admin/changepass.php CSRF.
|
CWE-352
Origin Validation Error
|
CVE-2020-15014
|
2024-11-21 14:04 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213623
|
4.3 |
MEDIUM
Network
|
gnu canonical debian
|
mailman ubuntu_linux debian_linux
|
GNU Mailman before 2.1.33 allows arbitrary content injection via the Cgi/private.py private archive login page.
|
CWE-74
Injection
|
CVE-2020-15011
|
2024-11-21 14:04 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213624
|
9.8 |
CRITICAL
Network
|
idsoftware doom_vanille_project
|
tech_1 doom_vanille
|
A buffer overflow in the M_LoadDefaults function in m_misc.c in id Tech 1 (aka Doom engine) allows arbitrary code execution via an unsafe usage of fscanf, because it does not limit the number of char…
|
CWE-120
Classic Buffer Overflow
|
CVE-2020-15007
|
2024-11-21 14:04 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213625
|
5.4 |
MEDIUM
Network
|
bludit
|
bludit
|
Bludit 3.12.0 allows stored XSS via JavaScript code in an SVG document to bl-kernel/ajax/logo-upload.php.
|
CWE-79
Cross-site Scripting
|
CVE-2020-15006
|
2024-11-21 14:04 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213626
|
8.1 |
HIGH
Network
|
f-secure
|
safe
|
An issue was discovered in F-Secure SAFE 17.7 on macOS. Due to incorrect client version verification, an attacker can connect to a privileged XPC service, and execute privileged commands on the syste…
|
NVD-CWE-noinfo
|
CVE-2020-14978
|
2024-11-21 14:04 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213627
|
8.1 |
HIGH
Network
|
f-secure
|
safe
|
An issue was discovered in F-Secure SAFE 17.7 on macOS. The XPC services use the PID to identify the connecting client, which allows an attacker to perform a PID reuse attack and connect to a privile…
|
NVD-CWE-noinfo
|
CVE-2020-14977
|
2024-11-21 14:04 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213628
|
5.5 |
MEDIUM
Local
|
gns3
|
ubridge
|
GNS3 ubridge through 0.9.18 on macOS, as used in GNS3 server before 2.1.17, allows a local attacker to read arbitrary files because it handles configuration-file errors by printing the configuration …
|
CWE-269
Improper Privilege Management
|
CVE-2020-14976
|
2024-11-21 14:04 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213629
|
7.8 |
HIGH
Local
|
iobit
|
iobit_unlocker
|
The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to delete, move, or copy arbitrary files via IOCTL code 0x222124.
|
NVD-CWE-noinfo
|
CVE-2020-14975
|
2024-11-21 14:04 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
213630
|
7.1 |
HIGH
Local
|
iobit
|
iobit_unlocker
|
The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to unlock a file and kill processes (even ones running as SYSTEM) that hold a handle, via IOCTL code 0x222124.
|
NVD-CWE-noinfo
|
CVE-2020-14974
|
2024-11-21 14:04 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|