|
208781
|
6.5 |
MEDIUM
Network
|
monospace
|
directus
|
An issue found in Directus API v.2.2.0 allows a remote attacker to cause a denial of service via a great amount of HTTP requests.
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2020-19850
|
2024-11-21 14:09 |
2023-04-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208782
|
6.1 |
MEDIUM
Network
|
kiftd_project
|
kiftd
|
Cross Site Scripting vulnerability found in KOHGYLW Kiftd v.1.0.18 allows a remote attacker to execute arbitrary code via the <ifram> tag in the upload file page.
|
CWE-79
Cross-site Scripting
|
CVE-2020-19699
|
2024-11-21 14:09 |
2023-04-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208783
|
6.1 |
MEDIUM
Network
|
ipandao
|
editor.md
|
Cross Site Scripting vulnerability found in Pandao Editor.md v.1.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the editor parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2020-19698
|
2024-11-21 14:09 |
2023-04-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208784
|
9.8 |
CRITICAL
Network
|
nginx
|
njs
|
Buffer Overflow found in Nginx NJS allows a remote attacker to execute arbitrary code via the njs_object_property parameter of the njs/njs_vm.c function.
|
CWE-120
Classic Buffer Overflow
|
CVE-2020-19695
|
2024-11-21 14:09 |
2023-04-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208785
|
9.8 |
CRITICAL
Network
|
espruino
|
espruino
|
An issue found in Espruino Espruino 6ea4c0a allows an attacker to execute arbitrrary code via oldFunc parameter of the jswrap_object.c:jswrap_function_replacewith endpoint.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-19693
|
2024-11-21 14:09 |
2023-04-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208786
|
9.8 |
CRITICAL
Network
|
nginx
|
njs
|
Buffer Overflow vulnerabilty found in Nginx NJS v.0feca92 allows a remote attacker to execute arbitrary code via the njs_module_read in the njs_module.c file.
|
CWE-120
Classic Buffer Overflow
|
CVE-2020-19692
|
2024-11-21 14:09 |
2023-04-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208787
|
9.8 |
CRITICAL
Network
|
wide_project
|
wide
|
Directory Traversal vulnerability found in B3log Wide allows a an attacker to escalate privileges via symbolic links.
|
CWE-22
Path Traversal
|
CVE-2020-19279
|
2024-11-21 14:09 |
2023-04-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208788
|
8.8 |
HIGH
Network
|
mm-wiki_project
|
mm-wiki
|
Cross Site Request Forgery vulnerability found in Phachon mm-wiki v.0.1.2 allows a remote attacker to execute arbitrary code via the system/user/save parameter.
|
CWE-352
Origin Validation Error
|
CVE-2020-19278
|
2024-11-21 14:09 |
2023-04-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208789
|
5.4 |
MEDIUM
Network
|
mm-wiki_project
|
mm-wiki
|
Cross Site Scripting vulnerability found in Phachon mm-wiki v.0.1.2 allows a remote attacker to execute arbitrary code via javascript code in the markdown editor.
|
CWE-79
Cross-site Scripting
|
CVE-2020-19277
|
2024-11-21 14:09 |
2023-04-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208790
|
8.8 |
HIGH
Network
|
cszcms
|
csz_cms
|
File upload vulnerability in CSKaza CSZ CMS v.1.2.2 fixed in v1.2.4 allows attacker to execute aritrary commands and code via crafted PHP file.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-19786
|
2024-11-21 14:09 |
2023-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|