|
208961
|
9.8 |
CRITICAL
Network
|
abloy
|
key_manager
|
An issue in the SeChangeNotifyPrivilege component of Abloy Key Manager Version 7.14301.0.0 allows attackers to escalate privileges via a change in permissions.
|
NVD-CWE-Other
|
CVE-2020-18170
|
2024-11-21 14:08 |
2021-07-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208962
|
7.8 |
HIGH
Local
|
techsmith
|
snagit
|
A vulnerability in the Windows installer XML (WiX) toolset of TechSmith Snagit 19.1.1.2860 allows attackers to escalate privileges. NOTE: Exploit of the Snagit installer would require the end user to…
|
CWE-269
Improper Privilege Management
|
CVE-2020-18169
|
2024-11-21 14:08 |
2021-07-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208963
|
9.8 |
CRITICAL
Network
|
twothink_project
|
twothink
|
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code.
|
NVD-CWE-noinfo
|
CVE-2020-17952
|
2024-11-21 14:08 |
2021-07-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208964
|
9.8 |
CRITICAL
Network
|
intelliants
|
subrion
|
SQL Injection vulnerability in Subrion CMS v4.2.1 in the search page if a website uses a PDO connection.
|
CWE-89
SQL Injection
|
CVE-2020-18155
|
2024-11-21 14:08 |
2021-07-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208965
|
6.5 |
MEDIUM
Network
|
thinkcmf
|
thinkcmf
|
Cross Site Request Forgery (CSRF) vulnerability in ThinkCMF v5.1.0, which can add an admin account.
|
CWE-352
Origin Validation Error
|
CVE-2020-18151
|
2024-11-21 14:08 |
2021-07-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208966
|
6.1 |
MEDIUM
Network
|
baidu
|
umeditor
|
Cross Site Scripting (XSS) vulnerability in umeditor v1.2.3 via /public/common/umeditor/php/getcontent.php.
|
CWE-79
Cross-site Scripting
|
CVE-2020-18145
|
2024-11-21 14:08 |
2021-07-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208967
|
9.8 |
CRITICAL
Network
|
ectouch
|
ectouch
|
SQL Injection Vulnerability in ECTouch v2 via the integral_min parameter in index.php.
|
CWE-89
SQL Injection
|
CVE-2020-18144
|
2024-11-21 14:08 |
2021-07-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208968
|
9.8 |
CRITICAL
Network
|
wms_project
|
wms
|
SQL Injection in WMS v1.0 allows remote attackers to execute arbitrary code via the "username" parameter in the component "chkuser.php".
|
CWE-89
SQL Injection
|
CVE-2020-18544
|
2024-11-21 14:08 |
2021-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208969
|
9.1 |
CRITICAL
Network
|
halo
|
halo
|
File Deletion vulnerability in Halo 0.4.3 via delBackup.
|
CWE-862
Missing Authorization
|
CVE-2020-19038
|
2024-11-21 14:08 |
2021-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208970
|
5.3 |
MEDIUM
Network
|
halo
|
halo
|
Incorrect Access Control vulnearbility in Halo 0.4.3, which allows a malicious user to bypass encrption to view encrpted articles via cookies.
|
CWE-287
Improper Authentication
|
CVE-2020-19037
|
2024-11-21 14:08 |
2021-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|