|
209671
|
7.5 |
HIGH
Network
|
meetecho
|
janus
|
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_preparse in sdp.c has a NULL pointer dereference.
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-13900
|
2024-11-21 14:02 |
2020-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209672
|
7.5 |
HIGH
Network
|
meetecho
|
janus
|
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_process_incoming_request in janus.c discloses information from uninitialized stack memory.
|
CWE-908
Use of Uninitialized Resource
|
CVE-2020-13899
|
2024-11-21 14:02 |
2020-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209673
|
7.5 |
HIGH
Network
|
meetecho
|
janus
|
An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_process in sdp.c has a NULL pointer dereference.
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-13898
|
2024-11-21 14:02 |
2020-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209674
|
7.8 |
HIGH
Local
|
irfanview
|
irfanview
|
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038eb7.
|
NVD-CWE-noinfo
|
CVE-2020-13906
|
2024-11-21 14:02 |
2020-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209675
|
8.8 |
HIGH
Network
|
irfanview
|
irfanview
|
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038ed4.
|
NVD-CWE-noinfo
|
CVE-2020-13905
|
2024-11-21 14:02 |
2020-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209676
|
5.4 |
MEDIUM
Network
|
enhancesoft
|
osticket
|
scp/categories.php in osTicket 1.14.2 allows XSS via a Knowledgebase Category Name or Category Description. The attacker must be an Agent.
|
CWE-79
Cross-site Scripting
|
CVE-2020-14012
|
2024-11-21 14:02 |
2020-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209677
|
6.1 |
MEDIUM
Network
|
laborator
|
xenon
|
The Laborator Xenon theme 1.3 for WordPress allows Reflected XSS via the data/typeahead-generate.php q (aka name) parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2020-14010
|
2024-11-21 14:02 |
2020-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209678
|
8.8 |
HIGH
Network
|
j2store
|
j2store
|
The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager.
|
CWE-89
SQL Injection
|
CVE-2020-13996
|
2024-11-21 14:02 |
2020-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209679
|
5.4 |
MEDIUM
Network
|
your_online_shop_project
|
your_online_shop
|
Your Online Shop 1.8.0 allows authenticated users to trigger XSS via a Change Name or Change Surname operation.
|
CWE-79
Cross-site Scripting
|
CVE-2020-13911
|
2024-11-21 14:02 |
2020-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209680
|
8.8 |
HIGH
Adjacent
|
royalapps
|
royal_ts
|
Royal TS before 5 has a 0.0.0.0 listener, which makes it easier for attackers to bypass tunnel authentication via a brute-force approach.
|
CWE-307
mproper Restriction of Excessive Authentication Attempts
|
CVE-2020-13872
|
2024-11-21 14:02 |
2020-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|