|
208281
|
6.5 |
MEDIUM
Network
|
whatsapp
|
whatsapp
|
Whatsapp iOS 2.19.80 and prior and Android 2.19.222 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages.
|
NVD-CWE-Other
|
CVE-2020-20096
|
2024-11-21 14:11 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208282
|
6.5 |
MEDIUM
Network
|
apple
|
imessage
|
iMessage (Messages app) iOS 12.4 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages.
|
NVD-CWE-Other
|
CVE-2020-20095
|
2024-11-21 14:11 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208283
|
6.5 |
MEDIUM
Network
|
facebook
|
instagram
|
Instagram iOS 106.0 and prior and Android 107.0.0.11 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages
|
NVD-CWE-Other
|
CVE-2020-20094
|
2024-11-21 14:11 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208284
|
6.5 |
MEDIUM
Network
|
facebook
|
messenger
|
The Facebook Messenger app for iOS 227.0 and prior and Android 228.1.0.10.116 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via speciall…
|
NVD-CWE-Other
|
CVE-2020-20093
|
2024-11-21 14:11 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208285
|
5.4 |
MEDIUM
Network
|
laracms_project
|
laracms
|
LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows atackers to execute arbitrary web scripts or HTML via a crafted payload in the page management module.
|
CWE-79
Cross-site Scripting
|
CVE-2020-20131
|
2024-11-21 14:11 |
2021-09-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208286
|
5.4 |
MEDIUM
Network
|
laracms_project
|
laracms
|
LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the content editor.
|
CWE-79
Cross-site Scripting
|
CVE-2020-20129
|
2024-11-21 14:11 |
2021-09-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208287
|
7.5 |
HIGH
Network
|
laracms_project
|
laracms
|
LaraCMS v1.0.1 transmits sensitive information in cleartext which can be intercepted by attackers.
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2020-20128
|
2024-11-21 14:11 |
2021-09-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208288
|
6.1 |
MEDIUM
Network
|
earclink
|
espcms-p8
|
EARCLINK ESPCMS-P8 contains a cross-site scripting (XSS) vulnerability in espcms_web\espcms_load.php.
|
CWE-79
Cross-site Scripting
|
CVE-2020-20125
|
2024-11-21 14:11 |
2021-09-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208289
|
8.8 |
HIGH
Network
|
wuzhicms
|
wuzhi_cms
|
Wuzhi CMS v4.1.0 contains a remote code execution (RCE) vulnerability in \attachment\admin\index.php.
|
CWE-94
Code Injection
|
CVE-2020-20124
|
2024-11-21 14:11 |
2021-09-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208290
|
9.8 |
CRITICAL
Network
|
wuzhicms
|
wuzhi_cms
|
Wuzhi CMS v4.1 contains a SQL injection vulnerability in the checktitle() function in /coreframe/app/content/admin/content.php.
|
CWE-89
SQL Injection
|
CVE-2020-20122
|
2024-11-21 14:11 |
2021-09-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|