|
195881
|
7.3 |
HIGH
Network
|
supsystic
|
pricing_table_by_supsystic
|
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. Because there is no permission check on the ImportJSONTable, createFromTpl, and getJSONExportTable endpoin…
|
CWE-276
Incorrect Default Permissions
|
CVE-2020-9392
|
2024-11-21 14:40 |
2020-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195882
|
7.5 |
HIGH
Network
|
rconfig
|
rconfig
|
An issue was discovered in includes/head.inc.php in rConfig before 3.9.4. An unauthenticated attacker can retrieve saved cleartext credentials via a GET request to settings.php. Because the applicati…
|
CWE-670
Always-Incorrect Control Flow Implementation
|
CVE-2020-9425
|
2024-11-21 14:40 |
2020-03-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195883
|
6.5 |
MEDIUM
Network
|
signotec
|
signopad-api\/web
|
An issue was discovered in signotec signoPAD-API/Web (formerly Websocket Pad Server) before 3.1.1 on Windows. It is possible to perform a Denial of Service attack because the application doesn't limi…
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2020-9345
|
2024-11-21 14:40 |
2020-03-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195884
|
6.1 |
MEDIUM
Network
|
atlassian
|
subversion_application_lifecycle_management
|
Subversion ALM for the enterprise before 8.8.2 allows reflected XSS at multiple locations.
|
CWE-79
Cross-site Scripting
|
CVE-2020-9344
|
2024-11-21 14:40 |
2020-03-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195885
|
6.5 |
MEDIUM
Network
|
signotec
|
signopad-api\/web
|
An issue was discovered in signotec signoPAD-API/Web (formerly Websocket Pad Server) before 3.1.1 on Windows. It is possible to perform a Denial of Service attack because the implementation doesn't l…
|
NVD-CWE-noinfo
|
CVE-2020-9343
|
2024-11-21 14:40 |
2020-03-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195886
|
9.8 |
CRITICAL
Network
|
logicaldoc
|
logicaldoc
|
LogicalDoc before 8.3.3 could allow an attacker to upload arbitrary files, leading to command execution or retrieval of data from the database. LogicalDoc provides a functionality to add documents. T…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-9423
|
2024-11-21 14:40 |
2020-03-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195887
|
7.5 |
HIGH
Network
|
beyondtrust
|
privilege_management_for_windows_and_mac
|
BeyondTrust Privilege Management for Windows and Mac (aka PMWM; formerly Avecto Defendpoint) 5.1 through 5.5 before 5.5 SR1 mishandles command-line arguments with PowerShell .ps1 file extensions pres…
|
NVD-CWE-noinfo
|
CVE-2020-9326
|
2024-11-21 14:40 |
2020-03-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195888
|
7.5 |
HIGH
Network
|
aquaforest
|
tiff_server
|
Aquaforest TIFF Server 4.0 allows Unauthenticated Arbitrary File Download.
|
CWE-22 CWE-306
Path Traversal Missing Authentication for Critical Function
|
CVE-2020-9325
|
2024-11-21 14:40 |
2020-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195889
|
7.5 |
HIGH
Network
|
aquaforest
|
tiff_server
|
Aquaforest TIFF Server 4.0 allows Unauthenticated SMB Hash Capture via UNC.
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2020-9324
|
2024-11-21 14:40 |
2020-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195890
|
5.3 |
MEDIUM
Network
|
aquaforest
|
tiff_server
|
Aquaforest TIFF Server 4.0 allows Unauthenticated File and Directory Enumeration via tiffserver/tssp.aspx.
|
CWE-22
Path Traversal
|
CVE-2020-9323
|
2024-11-21 14:40 |
2020-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|