|
208981
|
7.8 |
HIGH
Local
|
foxitsoftware
|
3d
|
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in that the…
|
-
|
CVE-2020-17412
|
2024-11-21 14:08 |
2020-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208982
|
3.3 |
LOW
Local
|
foxitsoftware
|
3d
|
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in …
|
-
|
CVE-2020-17411
|
2024-11-21 14:08 |
2020-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208983
|
7.8 |
HIGH
Local
|
foxitsoftware
|
foxit_reader phantompdf
|
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in that the…
|
-
|
CVE-2020-17410
|
2024-11-21 14:08 |
2020-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208984
|
6.5 |
MEDIUM
Adjacent
|
netgear
|
r6020_firmware r6080_firmware r6120_firmware r6220_firmware r6230_firmware r6260_firmware r6330_firmware r6350_firmware r6850_firmware jnr3210_firmware wnr2020_firmware
|
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6260, R6220, R6020, JNR3210, and WNR2020 routers with firmwa…
|
-
|
CVE-2020-17409
|
2024-11-21 14:08 |
2020-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208985
|
9.8 |
CRITICAL
Network
|
microhardcorp
|
bullet-lte_firmware
|
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE prior to v1.2.0-r1112. Authentication is not required to exploit this vulnerabil…
|
-
|
CVE-2020-17407
|
2024-11-21 14:08 |
2020-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208986
|
8.8 |
HIGH
Network
|
microhardcorp
|
bullet-lte_firmware
|
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE prior to v1.2.0-r1112. Authentication is required to exploit this vulnerability.…
|
-
|
CVE-2020-17406
|
2024-11-21 14:08 |
2020-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208987
|
4.8 |
MEDIUM
Network
|
impresscms
|
impresscms
|
ImpressCMS 1.4.0 is affected by XSS in modules/system/admin.php which may result in arbitrary remote code execution.
|
CWE-79
Cross-site Scripting
|
CVE-2020-17551
|
2024-11-21 14:08 |
2020-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208988
|
9.1 |
CRITICAL
Network
|
get-simple
|
getsimplecms
|
GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php
|
CWE-22
Path Traversal
|
CVE-2020-18191
|
2024-11-21 14:08 |
2020-10-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208989
|
9.1 |
CRITICAL
Network
|
bludit
|
bludit
|
Bludit v3.8.1 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /admin/ajax/upload-profile-picture.
|
CWE-22
Path Traversal
|
CVE-2020-18190
|
2024-11-21 14:08 |
2020-10-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208990
|
9.8 |
CRITICAL
Network
|
pluxml
|
pluxml
|
class.plx.admin.php in PluXml 5.7 allows attackers to execute arbitrary PHP code by modify the configuration file in a linux environment.
|
CWE-94
Code Injection
|
CVE-2020-18185
|
2024-11-21 14:08 |
2020-10-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|