|
196311
|
7.5 |
HIGH
Network
|
rollup-plugin-dev-server_project
|
rollup-plugin-dev-server
|
This affects all versions of package rollup-plugin-dev-server. There is no path sanitization in readFile operation inside the readFileFromContentBase function.
|
CWE-22
Path Traversal
|
CVE-2020-7686
|
2024-11-21 14:37 |
2020-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196312
|
7.5 |
HIGH
Network
|
rollup-plugin-server_project
|
rollup-plugin-server
|
This affects all versions of package rollup-plugin-server. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function.
|
CWE-22
Path Traversal
|
CVE-2020-7683
|
2024-11-21 14:37 |
2020-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196313
|
7.5 |
HIGH
Network
|
marked-tree_project
|
marked-tree
|
This affects all versions of package marked-tree. There is no path sanitization in the path provided at fs.readFile in index.js.
|
CWE-22
Path Traversal
|
CVE-2020-7682
|
2024-11-21 14:37 |
2020-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196314
|
7.5 |
HIGH
Network
|
indo-mars
|
marscode
|
This affects all versions of package marscode. There is no path sanitization in the path provided at fs.readFile in index.js.
|
CWE-22
Path Traversal
|
CVE-2020-7681
|
2024-11-21 14:37 |
2020-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196315
|
4.7 |
MEDIUM
Network
|
schneider-electric
|
software_update_utility
|
A CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability exists in Schneider Electric Software Update (SESU), V2.4.0 and prior, which could cause execution of malicious code on th…
|
CWE-601
Open Redirect
|
CVE-2020-7520
|
2024-11-21 14:37 |
2020-07-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196316
|
7.5 |
HIGH
Network
|
schneider-electric
|
easergy_builder
|
A CWE-521: Weak Password Requirements vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker to compromise a user account.
|
CWE-521
Weak Password Requirements
|
CVE-2020-7519
|
2024-11-21 14:37 |
2020-07-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196317
|
7.5 |
HIGH
Network
|
schneider-electric
|
easergy_builder
|
A CWE-20: Improper input validation vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker to modify project configuration files.
|
CWE-20
Improper Input Validation
|
CVE-2020-7518
|
2024-11-21 14:37 |
2020-07-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196318
|
5.5 |
MEDIUM
Local
|
schneider-electric
|
easergy_builder
|
A CWE-312: Cleartext Storage of Sensitive Information vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker to read user credentials.
|
CWE-312
Cleartext Storage of Sensitive Information
|
CVE-2020-7517
|
2024-11-21 14:37 |
2020-07-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196319
|
7.8 |
HIGH
Local
|
schneider-electric
|
easergy_builder
|
A CWE-316: Cleartext Storage of Sensitive Information in Memory vulnerability exists in Easergy Builder V1.4.7.2 and prior which could allow an attacker access to login credentials.
|
-
|
CVE-2020-7516
|
2024-11-21 14:37 |
2020-07-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196320
|
7.8 |
HIGH
Local
|
schneider-electric
|
easergy_builder
|
A CWE-321: Use of hard-coded cryptographic key stored in cleartext vulnerability exists in Easergy Builder V1.4.7.2 and prior which could allow an attacker to decrypt a password.
|
-
|
CVE-2020-7515
|
2024-11-21 14:37 |
2020-07-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|