|
196071
|
9.8 |
CRITICAL
Network
|
phpzag
|
phpzag
|
SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql
|
CWE-89
SQL Injection
|
CVE-2020-8521
|
2024-11-21 14:38 |
2020-07-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196072
|
9.8 |
CRITICAL
Network
|
phpzag
|
phpzag
|
SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql
|
CWE-89
SQL Injection
|
CVE-2020-8520
|
2024-11-21 14:38 |
2020-07-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196073
|
9.8 |
CRITICAL
Network
|
phpzag
|
phpzag
|
SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records with ajax php mysql
|
CWE-89
SQL Injection
|
CVE-2020-8519
|
2024-11-21 14:38 |
2020-07-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196074
|
8.8 |
HIGH
Network
|
ui
|
unifi_protect_firmware
|
We have recently released new version of UniFi Protect firmware v1.13.3 and v1.14.10 for Unifi Cloud Key Gen2 Plus and UniFi Dream Machine Pro/UNVR respectively that fixes vulnerabilities found on Pr…
|
CWE-78
OS Command
|
CVE-2020-8188
|
2024-11-21 14:38 |
2020-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196075
|
6.5 |
MEDIUM
Network
|
rubyonrails fedoraproject
|
rails fedora
|
A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2020-8185
|
2024-11-21 14:38 |
2020-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196076
|
4.1 |
MEDIUM
Network
|
nextcloud
|
deck
|
Improper access control in Nextcloud Deck 1.0.0 allowed an attacker to inject tasks into other users decks.
|
CWE-269
Improper Privilege Management
|
CVE-2020-8179
|
2024-11-21 14:38 |
2020-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196077
|
6.1 |
MEDIUM
Network
|
shopify
|
koa-shopify-auth
|
A cross-site scripting vulnerability exists in koa-shopify-auth v3.1.61-v3.1.62 that allows an attacker to inject JS payloads into the `shop` parameter on the `/shopify/auth/enable_cookies` endpoint.
|
CWE-79
Cross-site Scripting
|
CVE-2020-8176
|
2024-11-21 14:38 |
2020-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196078
|
4.3 |
MEDIUM
Network
|
rubyonrails debian
|
rails debian_linux
|
A CSRF forgery vulnerability exists in rails < 5.2.5, rails < 6.0.4 that makes it possible for an attacker to, given a global CSRF token such as the one present in the authenticity_token meta tag, fo…
|
CWE-352
Origin Validation Error
|
CVE-2020-8166
|
2024-11-21 14:38 |
2020-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196079
|
8.8 |
HIGH
Network
|
rubyonrails debian
|
rails debian_linux
|
The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the `locals` argument of a `render` call to perform a RCE.
|
CWE-94
Code Injection
|
CVE-2020-8163
|
2024-11-21 14:38 |
2020-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196080
|
8.6 |
HIGH
Network
|
rack_project debian canonical
|
rack debian_linux ubuntu_linux
|
A directory traversal vulnerability exists in rack < 2.2.0 that allows an attacker perform directory traversal vulnerability in the Rack::Directory app that is bundled with Rack which could result in…
|
CWE-22
Path Traversal
|
CVE-2020-8161
|
2024-11-21 14:38 |
2020-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|