|
198691
|
9.8 |
CRITICAL
Network
|
4nb
|
videooffice
|
An arbitrary file download and execution vulnerability was found in the VideoOffice X2.9 and earlier versions (CVE-2020-7878). This issue is due to missing support for integrity check.
|
CWE-345
Insufficient Verification of Data Authenticity
|
CVE-2020-7878
|
2024-11-21 14:37 |
2021-12-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198692
|
8.8 |
HIGH
Network
|
douzone
|
neors
|
The vulnerabilty was discovered in ActiveX module related to NeoRS remote support program. This issue allows an remote attacker to download and execute remote file. It is because of improper paramete…
|
CWE-20
Improper Input Validation
|
CVE-2020-7880
|
2024-11-21 14:37 |
2021-12-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198693
|
9.8 |
CRITICAL
Network
|
iptime
|
c200_firmware
|
This issue was discovered when the ipTIME C200 IP Camera was synchronized with the ipTIME NAS. It is necessary to extract value for ipTIME IP camera because the ipTIME NAS send ans setCookie('[COOKIE…
|
CWE-78
OS Command
|
CVE-2020-7879
|
2024-11-21 14:37 |
2021-12-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198694
|
8.8 |
HIGH
Network
|
afreecatv
|
afreecatv
|
The vulnerability function is enabled when the streamer service related to the AfreecaTV communicated through web socket using 21201 port. A stack-based buffer overflow leading to remote code executi…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-7881
|
2024-11-21 14:37 |
2021-11-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198695
|
9.1 |
CRITICAL
Network
|
hancom
|
anysign4pc
|
Using the parameter of getPFXFolderList function, attackers can see the information of authorization certification and delete the files. It occurs because the parameter contains path traversal charac…
|
CWE-22
Path Traversal
|
CVE-2020-7882
|
2024-11-21 14:37 |
2021-11-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198696
|
8.8 |
HIGH
Network
|
dext5
|
dext5upload
|
DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. Thi…
|
CWE-494
Download of Code Without Integrity Check
|
CVE-2020-7875
|
2024-11-21 14:37 |
2021-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198697
|
7.8 |
HIGH
Local
|
helpu
|
helpuviewer
|
An improper input validation vulnerability in Helpu solution could allow a local attacker to arbitrary file creation and execution without click file transfer menu. It is possible to file in arbitrar…
|
CWE-20
Improper Input Validation
|
CVE-2020-7867
|
2024-11-21 14:37 |
2021-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198698
|
8.8 |
HIGH
Network
|
tobesoft
|
nexacro
|
Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows the attacker to cause an arbitrary file download and execution. This vulnerabil…
|
CWE-494
Download of Code Without Integrity Check
|
CVE-2020-7874
|
2024-11-21 14:37 |
2021-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198699
|
9.8 |
CRITICAL
Network
|
ksystem
|
k-system_wellcomm
|
Download of code without integrity check vulnerability in ActiveX control of Younglimwon Co., Ltd allows the attacker to cause a arbitrary file download and execution.
|
CWE-494
Download of Code Without Integrity Check
|
CVE-2020-7873
|
2024-11-21 14:37 |
2021-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198700
|
9.8 |
CRITICAL
Network
|
inoguard
|
execm_coreb2b
|
A vulnerability(improper input validation) in the ExECM CoreB2B solution allows an unauthenticated attacker to download and execute an arbitrary file via httpDownload function. A successful exploit c…
|
CWE-20
Improper Input Validation
|
CVE-2020-7865
|
2024-11-21 14:37 |
2021-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
