|
209501
|
5.4 |
MEDIUM
Network
|
bludit
|
bludit
|
Bludit 3.12.0 allows stored XSS via JavaScript code in an SVG document to bl-kernel/ajax/logo-upload.php.
|
CWE-79
Cross-site Scripting
|
CVE-2020-15006
|
2024-11-21 14:04 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209502
|
8.1 |
HIGH
Network
|
f-secure
|
safe
|
An issue was discovered in F-Secure SAFE 17.7 on macOS. Due to incorrect client version verification, an attacker can connect to a privileged XPC service, and execute privileged commands on the syste…
|
NVD-CWE-noinfo
|
CVE-2020-14978
|
2024-11-21 14:04 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209503
|
8.1 |
HIGH
Network
|
f-secure
|
safe
|
An issue was discovered in F-Secure SAFE 17.7 on macOS. The XPC services use the PID to identify the connecting client, which allows an attacker to perform a PID reuse attack and connect to a privile…
|
NVD-CWE-noinfo
|
CVE-2020-14977
|
2024-11-21 14:04 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209504
|
5.5 |
MEDIUM
Local
|
gns3
|
ubridge
|
GNS3 ubridge through 0.9.18 on macOS, as used in GNS3 server before 2.1.17, allows a local attacker to read arbitrary files because it handles configuration-file errors by printing the configuration …
|
CWE-269
Improper Privilege Management
|
CVE-2020-14976
|
2024-11-21 14:04 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209505
|
7.8 |
HIGH
Local
|
iobit
|
iobit_unlocker
|
The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to delete, move, or copy arbitrary files via IOCTL code 0x222124.
|
NVD-CWE-noinfo
|
CVE-2020-14975
|
2024-11-21 14:04 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209506
|
7.1 |
HIGH
Local
|
iobit
|
iobit_unlocker
|
The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to unlock a file and kill processes (even ones running as SYSTEM) that hold a handle, via IOCTL code 0x222124.
|
NVD-CWE-noinfo
|
CVE-2020-14974
|
2024-11-21 14:04 |
2020-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209507
|
7.8 |
HIGH
Local
|
pi-hole
|
pi-hole
|
Pi-hole through 5.0 allows code injection in piholedhcp (the Static DHCP Leases section) by modifying Teleporter backup files and then restoring them. This occurs in settings.php. To exploit this, an…
|
CWE-862
Missing Authorization
|
CVE-2020-14971
|
2024-11-21 14:04 |
2020-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209508
|
4.8 |
MEDIUM
Network
|
tp-link
|
tl-wr740n_firmware tl-wr740nd_firmware
|
On TP-Link TL-WR740N v4 and TL-WR740ND v4 devices, an attacker with access to the admin panel can inject HTML code and change the HTML context of the target pages and stations in the access-control s…
|
CWE-79
Cross-site Scripting
|
CVE-2020-14965
|
2024-11-21 14:04 |
2020-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209509
|
9.8 |
CRITICAL
Network
|
draytek
|
vigor300b_firmware vigor2960_firmware vigor3900_firmware
|
A stack-based buffer overflow on DrayTek Vigor2960, Vigor3900, and Vigor300B devices before 1.5.1.1 allows remote attackers to execute arbitrary code via the formuserphonenumber parameter in an authu…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-14993
|
2024-11-21 14:04 |
2020-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209510
|
7.5 |
HIGH
Network
|
herac
|
tuxguitar
|
An issue was discovered in io/gpx/GPXDocumentReader.java in TuxGuitar 1.5.4. It uses misconfigured XML parsers, leading to XXE while loading GP6 (.gpx) and GP7 (.gp) tablature files.
|
CWE-611
XXE
|
CVE-2020-14940
|
2024-11-21 14:04 |
2020-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|