|
209201
|
5.4 |
MEDIUM
Network
|
mblog_project
|
mblog
|
Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the post content field to /post/editing.
|
CWE-79
Cross-site Scripting
|
CVE-2020-19618
|
2024-11-21 14:09 |
2021-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209202
|
5.4 |
MEDIUM
Network
|
mblog_project
|
mblog
|
Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the nickname field to /settings/profile.
|
CWE-79
Cross-site Scripting
|
CVE-2020-19617
|
2024-11-21 14:09 |
2021-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209203
|
5.4 |
MEDIUM
Network
|
mblog_project
|
mblog
|
Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the post header field to /post/editing.
|
CWE-79
Cross-site Scripting
|
CVE-2020-19616
|
2024-11-21 14:09 |
2021-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209204
|
7.5 |
HIGH
Network
|
flycms_project
|
flycms
|
Server Side Request Forgery (SSRF) vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503.
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2020-19613
|
2024-11-21 14:09 |
2021-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209205
|
6.1 |
MEDIUM
Network
|
insma
|
wifi_mini_spy_1080p_hd_security_ip_camera_firmware
|
Cross Site Scripting (XSS) vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B via all fields in the FTP settings page to the "goform/formSetFtpCfg" settings page.
|
CWE-79
Cross-site Scripting
|
CVE-2020-19643
|
2024-11-21 14:09 |
2021-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209206
|
6.2 |
MEDIUM
Physics
|
insma
|
wifi_mini_spy_1080p_hd_security_ip_camera_firmware
|
An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. A local attacker can execute arbitrary code via editing the 'recdata.db' file to call a specially crafted GoAhead A…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-19642
|
2024-11-21 14:09 |
2021-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209207
|
8.8 |
HIGH
Network
|
insma
|
wifi_mini_spy_1080p_hd_security_ip_camera_firmware
|
An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. Authenticated attackers with the "Operator" Privilege can gain admin privileges via a crafted request to '/goform/f…
|
NVD-CWE-Other
|
CVE-2020-19641
|
2024-11-21 14:09 |
2021-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209208
|
7.5 |
HIGH
Network
|
insma
|
wifi_mini_spy_1080p_hd_security_ip_camera_firmware
|
An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. An unauthenticated attacker can reboot the device causing a Denial of Service, via a hidden reboot command to '/med…
|
NVD-CWE-noinfo
|
CVE-2020-19640
|
2024-11-21 14:09 |
2021-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209209
|
8.8 |
HIGH
Network
|
insma
|
wifi_mini_spy_1080p_hd_security_ip_camera_firmware
|
Cross Site Request Forgery (CSRF) vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B, via all fields to WebUI.
|
CWE-352
Origin Validation Error
|
CVE-2020-19639
|
2024-11-21 14:09 |
2021-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209210
|
5.4 |
MEDIUM
Network
|
craftcms
|
craft_cms
|
Cross Site Scripting (XSS) vulnerability in craftcms 3.1.31, allows remote attackers to inject arbitrary web script or HTML, via /admin/settings/sites/new.
|
CWE-79
Cross-site Scripting
|
CVE-2020-19626
|
2024-11-21 14:09 |
2021-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|