|
211471
|
8.1 |
HIGH
Network
|
gonitro
|
nitro_pro
|
npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode CNxJBIG2DecodeStream Heap Corruption at npdf!CAPPDAnnotHandlerUtils::create_popup_for_markup+0x12fbe via a crafted PDF document.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-10223
|
2024-11-21 13:54 |
2020-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211472
|
8.1 |
HIGH
Network
|
gonitro
|
nitro_pro
|
npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npdf!nitro::get_property+2381 via a crafted PDF document.
|
NVD-CWE-noinfo
|
CVE-2020-10222
|
2024-11-21 13:54 |
2020-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211473
|
8.8 |
HIGH
Network
|
rconfig
|
rconfig
|
lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the fileName POST parameter.
|
CWE-78
OS Command
|
CVE-2020-10221
|
2024-11-21 13:54 |
2020-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211474
|
9.8 |
CRITICAL
Network
|
rconfig
|
rconfig
|
An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter.
|
CWE-89
SQL Injection
|
CVE-2020-10220
|
2024-11-21 13:54 |
2020-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211475
|
8.8 |
HIGH
Network
|
dlink
trendnet
|
dir-825_firmware
tew-632brp_firmware
|
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the date parameter in a system_time.cgi POST request. TRENDnet TEW-632BRP 1…
|
CWE-78
OS Command
|
CVE-2020-10216
|
2024-11-21 13:54 |
2020-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211476
|
8.8 |
HIGH
Network
|
dlink
trendnet
|
dir-825_firmware
tew-632brp_firmware
|
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the dns_query_name parameter in a dns_query.cgi POST request. TRENDnet TEW-…
|
CWE-78
OS Command
|
CVE-2020-10215
|
2024-11-21 13:54 |
2020-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211477
|
8.8 |
HIGH
Network
|
dlink
|
dir-825_firmware
|
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is a stack-based buffer overflow in the httpd binary. It allows an authenticated user to execute arbitrary code via a POST to ntp_s…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-10214
|
2024-11-21 13:54 |
2020-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211478
|
8.8 |
HIGH
Network
|
dlink
trendnet
|
dir-825_firmware
tew-632brp_firmware
|
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the wps_sta_enrollee_pin parameter in a set_sta_enrollee_pin.cgi POST reque…
|
CWE-78
OS Command
|
CVE-2020-10213
|
2024-11-21 13:54 |
2020-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211479
|
9.8 |
CRITICAL
Network
|
tecrail
|
responsive_filemanager
|
upload.php in Responsive FileManager 9.13.4 and 9.14.0 allows SSRF via the url parameter because file-extension blocking is mishandled and because it is possible for a DNS hostname to resolve to an i…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2020-10212
|
2024-11-21 13:54 |
2020-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211480
|
5.4 |
MEDIUM
Network
|
citrix
|
gateway_firmware
|
Citrix Gateway 11.1, 12.0, and 12.1 allows Cache Poisoning. NOTE: Citrix disputes this as not a vulnerability. By default, Citrix ADC only caches static content served under certain URL paths for Cit…
|
CWE-444
HTTP Request Smuggling
|
CVE-2020-10112
|
2024-11-21 13:54 |
2020-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
