|
199401
|
6.1 |
MEDIUM
Network
|
crossbar
|
autobahn
|
Autobahn|Python before 20.12.3 allows redirect header injection.
|
CWE-601
Open Redirect
|
CVE-2020-35678
|
2024-11-21 14:27 |
2020-12-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199402
|
9.8 |
CRITICAL
Network
|
flamingo_project
|
flamingo
|
Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addUser.
|
CWE-89
SQL Injection
|
CVE-2020-35245
|
2024-11-21 14:27 |
2020-12-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199403
|
9.8 |
CRITICAL
Network
|
flamingo_project
|
flamingo
|
Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addGroup.
|
CWE-89
SQL Injection
|
CVE-2020-35244
|
2024-11-21 14:27 |
2020-12-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199404
|
9.8 |
CRITICAL
Network
|
flamingo_project
|
flamingo
|
Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserInfoInDb.
|
CWE-89
SQL Injection
|
CVE-2020-35243
|
2024-11-21 14:27 |
2020-12-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199405
|
9.8 |
CRITICAL
Network
|
flamingo_project
|
flamingo
|
Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserTeamInfoInDbAndMemory.
|
CWE-89
SQL Injection
|
CVE-2020-35242
|
2024-11-21 14:27 |
2020-12-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199406
|
9.8 |
CRITICAL
Network
|
huorong
|
internet_security
|
Beijing Huorong Internet Security 5.0.55.2 allows a non-admin user to escalate privileges by injecting code into a process, and then waiting for a Huorong services restart or a system reboot.
|
NVD-CWE-noinfo
|
CVE-2020-35364
|
2024-11-21 14:27 |
2020-12-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199407
|
7.5 |
HIGH
Network
|
dext5
|
dext5upload
|
DEXT5Upload 2.7.1262310 and earlier is affected by Directory Traversal in handler/dext5handler.jsp. This could allow remote files to be downloaded via a dext5CMD=downloadRequest action with traversal…
|
CWE-22
Path Traversal
|
CVE-2020-35362
|
2024-11-21 14:27 |
2020-12-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199408
|
7.5 |
HIGH
Network
|
flamingoim_project
|
flamingoim
|
Flamingo (aka FlamingoIM) through 2020-09-29 allows ../ directory traversal because the only ostensibly unpredictable part of a file-transfer request is an MD5 computation; however, this computation …
|
CWE-22
Path Traversal
|
CVE-2020-35284
|
2024-11-21 14:27 |
2020-12-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199409
|
7.5 |
HIGH
Network
|
gobby_project
|
gobby
|
Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain set_language calls.
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-35450
|
2024-11-21 14:27 |
2020-12-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
199410
|
7.5 |
HIGH
Network
|
pureftpd
|
pure-ftpd
|
Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit.
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2020-35359
|
2024-11-21 14:27 |
2020-12-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|