|
209481
|
9.8 |
CRITICAL
Network
|
thecodingmachine
|
gotenberg
|
A directory traversal vulnerability in file upload function of Gotenberg through 6.2.1 allows an attacker to upload and overwrite any writable files outside the intended folder. This can lead to DoS,…
|
CWE-22
Path Traversal
|
CVE-2020-13450
|
2024-11-21 14:01 |
2021-01-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209482
|
7.5 |
HIGH
Network
|
thecodingmachine
|
gotenberg
|
A directory traversal vulnerability in the Markdown engine of Gotenberg through 6.2.1 allows an attacker to read any container files.
|
CWE-22
Path Traversal
|
CVE-2020-13449
|
2024-11-21 14:01 |
2021-01-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209483
|
7.5 |
HIGH
Network
|
rockwellautomation
|
rslinx
|
A denial-of-service vulnerability exists in the Ethernet/IP server functionality of Rockwell Automation RSLinx Classic 2.57.00.14 CPR 9 SR 3. A specially crafted network request can lead to a denial …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2020-13573
|
2024-11-21 14:01 |
2021-01-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209484
|
7.8 |
HIGH
Local
|
softmaker
|
softmaker_office
|
An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the docu…
|
CWE-787 CWE-681
Out-of-bounds Write Incorrect Conversion between Numeric Types
|
CVE-2020-13545
|
2024-11-21 14:01 |
2021-01-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209485
|
7.8 |
HIGH
Local
|
softmaker
|
softmaker_office
|
An exploitable sign extension vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the documen…
|
CWE-681
Incorrect Conversion between Numeric Types
|
CVE-2020-13544
|
2024-11-21 14:01 |
2021-01-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209486
|
8.8 |
HIGH
Local
|
win911
|
mobile-911_server
|
An exploitable local privilege elevation vulnerability exists in the file system permissions of the Mobile-911 Server V2.5 install directory. Depending on the vector chosen, an attacker can overwrite…
|
CWE-276
Incorrect Default Permissions
|
CVE-2020-13541
|
2024-11-21 14:01 |
2021-01-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209487
|
7.8 |
HIGH
Local
|
win911
|
win-911
|
An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via WIN-911 Account Change Utility. Depending on the …
|
CWE-276
Incorrect Default Permissions
|
CVE-2020-13540
|
2024-11-21 14:01 |
2021-01-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209488
|
7.8 |
HIGH
Local
|
win911
|
win-911
|
An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via “WIN-911 Mobile Runtime” service. Depending on th…
|
CWE-276
Incorrect Default Permissions
|
CVE-2020-13539
|
2024-11-21 14:01 |
2021-01-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209489
|
7.5 |
HIGH
Network
|
xwiki
|
xwiki
|
XWiki Platform before 12.8 mishandles escaping in the property displayer.
|
CWE-116
Improper Encoding or Escaping of Output
|
CVE-2020-13654
|
2024-11-21 14:01 |
2020-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209490
|
4.8 |
MEDIUM
Network
|
nchsoftware
|
express_invoice
|
NCH Express Invoice 8.06 to 8.24 is vulnerable to Reflected XSS in the Quotes List module.
|
CWE-79
Cross-site Scripting
|
CVE-2020-13476
|
2024-11-21 14:01 |
2020-12-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|