|
196851
|
9.1 |
CRITICAL
Network
|
dell
|
emc_openmanage_server_administrator
|
Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities. An unauthenticated remote attacker could potentially exploit these vulnerabilit…
|
CWE-22
Path Traversal
|
CVE-2020-5377
|
2024-11-21 14:34 |
2020-07-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196852
|
8.8 |
HIGH
Network
|
wpsocialrocket
|
social_sharing
|
Cross-site request forgery (CSRF) vulnerability in Social Sharing Plugin versions prior to 1.2.10 allows remote attackers to hijack the authentication of administrators via unspecified vectors.
|
CWE-352
Origin Validation Error
|
CVE-2020-5611
|
2024-11-21 14:34 |
2020-07-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196853
|
5.4 |
MEDIUM
Network
|
teltonika-networks
|
gateway_trb245_firmware
|
Insufficient output sanitization in Teltonika firmware TRB2_R_00.02.02 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by injecting malicious client-s…
|
CWE-79
Cross-site Scripting
|
CVE-2020-5769
|
2024-11-21 14:34 |
2020-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196854
|
4.9 |
MEDIUM
Network
|
icegram
|
email_subscribers_\&_newsletters
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8 allows a remote, authenticated attacker to …
|
CWE-89
SQL Injection
|
CVE-2020-5768
|
2024-11-21 14:34 |
2020-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196855
|
6.5 |
MEDIUM
Network
|
icegram
|
email_subscribers_\&_newsletters
|
Cross-site request forgery in Icegram Email Subscribers & Newsletters Plugin for WordPress v4.4.8 allows a remote attacker to send forged emails by tricking legitimate users into clicking a crafted l…
|
CWE-352
Origin Validation Error
|
CVE-2020-5767
|
2024-11-21 14:34 |
2020-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196856
|
9.8 |
CRITICAL
Network
|
grandstream
|
ucm6202_firmware ucm6204_firmware ucm6208_firmware
|
Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via SSH. An authenticated remote attacker can execute commands as the root user by issuing a spec…
|
CWE-78
OS Command
|
CVE-2020-5759
|
2024-11-21 14:34 |
2020-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196857
|
8.8 |
HIGH
Network
|
grandstream
|
ucm6202_firmware ucm6204_firmware ucm6208_firmware
|
Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can execute commands as the root user by sending a cra…
|
CWE-78
OS Command
|
CVE-2020-5758
|
2024-11-21 14:34 |
2020-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196858
|
9.8 |
CRITICAL
Network
|
grandstream
|
ucm6202_firmware ucm6204_firmware ucm6208_firmware
|
Grandstream UCM6200 series firmware version 1.0.20.23 and below is vulnerable to OS command injection via HTTP. An authenticated remote attacker can bypass command injection mitigations and execute c…
|
CWE-78
OS Command
|
CVE-2020-5757
|
2024-11-21 14:34 |
2020-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196859
|
8.8 |
HIGH
Network
|
grandstream
|
gwn7000_firmware
|
Grandstream GWN7000 firmware version 1.0.9.4 and below allows authenticated remote users to modify the system's crontab via undocumented API. An attacker can use this functionality to execute arbitra…
|
CWE-78
OS Command
|
CVE-2020-5756
|
2024-11-21 14:34 |
2020-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196860
|
5.4 |
MEDIUM
Network
|
tenable
|
nessus
|
Nessus 8.10.0 and earlier were found to contain a Stored XSS vulnerability due to improper validation of input during scan configuration. An authenticated, remote attacker could potentially exploit t…
|
CWE-79
Cross-site Scripting
|
CVE-2020-5765
|
2024-11-21 14:34 |
2020-07-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|