|
208841
|
9.8 |
CRITICAL
Network
|
ed01-cms_project
|
ed01-cms
|
An arbitrary file upload vulnerability in the image upload function of ED01-CMS v1.0 allows attackers to execute arbitrary commands.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-18261
|
2024-11-21 14:08 |
2021-11-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208842
|
6.1 |
MEDIUM
Network
|
ed01-cms_project
|
ed01-cms
|
ED01-CMS v1.0 was discovered to contain a reflective cross-site scripting (XSS) vulnerability in the component sposts.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML…
|
CWE-79
Cross-site Scripting
|
CVE-2020-18259
|
2024-11-21 14:08 |
2021-11-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208843
|
9.8 |
CRITICAL
Network
|
phpok
|
phpok
|
Buffer overflow vulnerability in framework/init.php in qinggan phpok 5.1, allows attackers to execute arbitrary code.
|
CWE-120
Classic Buffer Overflow
|
CVE-2020-18440
|
2024-11-21 14:08 |
2021-11-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208844
|
9.1 |
CRITICAL
Network
|
phpok
|
phpok
|
An issue was discoverered in in function edit_save_f in framework/admin/tpl_control.php in qinggan phpok 5.1, allows attackers to write arbitrary files or get a shell.
|
NVD-CWE-noinfo
|
CVE-2020-18439
|
2024-11-21 14:08 |
2021-11-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208845
|
7.5 |
HIGH
Network
|
phpok
|
phpok
|
Directory traversal vulnerability in qinggan phpok 5.1, allows attackers to disclose sensitive information, via the title parameter to admin.php.
|
CWE-22
Path Traversal
|
CVE-2020-18438
|
2024-11-21 14:08 |
2021-11-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208846
|
5.3 |
MEDIUM
Network
|
liftoffsoftware
|
gate_one
|
An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list.
|
CWE-290
Authentication Bypass by Spoofing
|
CVE-2020-19003
|
2024-11-21 14:08 |
2021-10-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208847
|
9.8 |
CRITICAL
Network
|
atlassian
|
floodlight
|
Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of unchecked prerequisites related to TCP or UDP ports, or group or table IDs.
|
CWE-20
Improper Input Validation
|
CVE-2020-18685
|
2024-11-21 14:08 |
2021-09-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208848
|
9.8 |
CRITICAL
Network
|
atlassian
|
floodlight
|
Floodlight through 1.2 has an integer overflow in checkFlow in StaticFlowEntryPusherResource.java via priority or port number.
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2020-18684
|
2024-11-21 14:08 |
2021-09-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208849
|
9.8 |
CRITICAL
Network
|
atlassian
|
floodlight
|
Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of undefined fields mishandling.
|
CWE-20
Improper Input Validation
|
CVE-2020-18683
|
2024-11-21 14:08 |
2021-09-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208850
|
8.8 |
HIGH
Network
|
laiketui
|
laiketui
|
Cross Site Request Forgery (CSRF) in LaikeTui v3 allows remote attackers to execute arbitrary code via the component '/index.php?module=member&action=add'.
|
CWE-352
Origin Validation Error
|
CVE-2020-19159
|
2024-11-21 14:08 |
2021-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|