|
208951
|
9.8 |
CRITICAL
Network
|
metinfo
|
metinfo
|
SQL Injection vulnerability in Metinfo 6.1.3 via a dosafety_emailadd action in basic.php.
|
CWE-89
SQL Injection
|
CVE-2020-18175
|
2024-11-21 14:08 |
2021-07-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208952
|
5.4 |
MEDIUM
Network
|
hucart
|
hucart
|
Cross Site Scripting (XSS) vulnerability in HuCart 5.7.4 via nickname in index.php.
|
CWE-79
Cross-site Scripting
|
CVE-2020-18158
|
2024-11-21 14:08 |
2021-07-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208953
|
8.8 |
HIGH
Network
|
metinfo
|
metinfo
|
Cross Site Request Forgery (CSRF) vulnerability in MetInfo 6.1.3 via a doaddsave action in admin/index.php.
|
CWE-352
Origin Validation Error
|
CVE-2020-18157
|
2024-11-21 14:08 |
2021-07-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208954
|
9.8 |
CRITICAL
Network
|
whatsns
|
whatsns
|
SQL Injextion vulnerability exists in Whatsns 4.0 via the ip parameter in index.php?admin_banned/add.htm.
|
CWE-89
SQL Injection
|
CVE-2020-18013
|
2024-11-21 14:08 |
2021-07-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208955
|
7.5 |
HIGH
Network
|
tinyexr_project
|
tinyexr
|
tinyexr 0.9.5 was discovered to contain an array index error in the tinyexr::DecodeEXRImage component, which can lead to a denial of service (DOS).
|
CWE-129
Improper Validation of Array Index
|
CVE-2020-18430
|
2024-11-21 14:08 |
2021-07-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208956
|
7.5 |
HIGH
Network
|
tinyexr_project
|
tinyexr
|
tinyexr commit 0.9.5 was discovered to contain an array index error in the tinyexr::SaveEXR component, which can lead to a denial of service (DOS).
|
CWE-129
Improper Validation of Array Index
|
CVE-2020-18428
|
2024-11-21 14:08 |
2021-07-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208957
|
9.8 |
CRITICAL
Network
|
autohotkey
|
autohotkey
|
A process injection vulnerability in setup.exe of AutoHotkey 1.1.32.00 allows attackers to escalate privileges.
|
NVD-CWE-noinfo
|
CVE-2020-18174
|
2024-11-21 14:08 |
2021-07-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208958
|
7.8 |
HIGH
Local
|
1password
|
1password
|
A DLL injection vulnerability in 1password.dll of 1Password 7.3.712 allows attackers to execute arbitrary code.
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2020-18173
|
2024-11-21 14:08 |
2021-07-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208959
|
9.8 |
CRITICAL
Network
|
trezor
|
bridge
|
A code injection vulnerability in the SeDebugPrivilege component of Trezor Bridge 2.0.27 allows attackers to escalate privileges.
|
CWE-94
Code Injection
|
CVE-2020-18172
|
2024-11-21 14:08 |
2021-07-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208960
|
8.8 |
HIGH
Local
|
techsmith
|
snagit
|
TechSmith Snagit 19.1.0.2653 uses Object Linking and Embedding (OLE) which can allow attackers to obfuscate and embed crafted files used to escalate privileges. NOTE: This implies that Snagit's use o…
|
CWE-269
Improper Privilege Management
|
CVE-2020-18171
|
2024-11-21 14:08 |
2021-07-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|