|
209501
|
6.5 |
MEDIUM
Adjacent
|
netgear
|
r6020_firmware r6080_firmware r6120_firmware r6220_firmware r6230_firmware r6260_firmware r6330_firmware r6350_firmware r6850_firmware jnr3210_firmware wnr2020_firmware
|
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6260, R6220, R6020, JNR3210, and WNR2020 routers with firmwa…
|
-
|
CVE-2020-17409
|
2024-11-21 14:08 |
2020-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209502
|
9.8 |
CRITICAL
Network
|
microhardcorp
|
bullet-lte_firmware
|
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE prior to v1.2.0-r1112. Authentication is not required to exploit this vulnerabil…
|
-
|
CVE-2020-17407
|
2024-11-21 14:08 |
2020-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209503
|
8.8 |
HIGH
Network
|
microhardcorp
|
bullet-lte_firmware
|
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE prior to v1.2.0-r1112. Authentication is required to exploit this vulnerability.…
|
-
|
CVE-2020-17406
|
2024-11-21 14:08 |
2020-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209504
|
4.8 |
MEDIUM
Network
|
impresscms
|
impresscms
|
ImpressCMS 1.4.0 is affected by XSS in modules/system/admin.php which may result in arbitrary remote code execution.
|
CWE-79
Cross-site Scripting
|
CVE-2020-17551
|
2024-11-21 14:08 |
2020-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209505
|
9.1 |
CRITICAL
Network
|
get-simple
|
getsimplecms
|
GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php
|
CWE-22
Path Traversal
|
CVE-2020-18191
|
2024-11-21 14:08 |
2020-10-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209506
|
9.1 |
CRITICAL
Network
|
bludit
|
bludit
|
Bludit v3.8.1 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /admin/ajax/upload-profile-picture.
|
CWE-22
Path Traversal
|
CVE-2020-18190
|
2024-11-21 14:08 |
2020-10-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209507
|
9.8 |
CRITICAL
Network
|
pluxml
|
pluxml
|
class.plx.admin.php in PluXml 5.7 allows attackers to execute arbitrary PHP code by modify the configuration file in a linux environment.
|
CWE-94
Code Injection
|
CVE-2020-18185
|
2024-11-21 14:08 |
2020-10-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209508
|
7.2 |
HIGH
Network
|
pluxxml
|
pluxxml
|
In PluxXml V5.7,the theme edit function /PluXml/core/admin/parametres_edittpl.php allows remote attackers to execute arbitrary PHP code by placing this code into a template.
|
NVD-CWE-noinfo
|
CVE-2020-18184
|
2024-11-21 14:08 |
2020-10-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209509
|
4.3 |
MEDIUM
Network
|
powerdns
|
authoritative
|
An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialize…
|
CWE-908
Use of Uninitialized Resource
|
CVE-2020-17482
|
2024-11-21 14:08 |
2020-10-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209510
|
7.5 |
HIGH
Network
|
nec
|
expresscluster_x
|
This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ExpressCluster 4.1. Authentication is not required to exploit this vulnerability. The spe…
|
-
|
CVE-2020-17408
|
2024-11-21 14:08 |
2020-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|