|
209581
|
5.5 |
MEDIUM
Local
|
gpac
|
gpac
|
A Null pointer dereference vulnerability exits in MP4Box - GPAC version 0.8.0-rev177-g51a8ef874-master via the gf_isom_get_track_id function, which causes a denial of service.
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-25427
|
2024-11-21 14:17 |
2022-01-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209582
|
9.8 |
CRITICAL
Network
|
dlink
|
dir-823g_firmware
|
A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbitrary web scripts via shell metacharacter…
|
CWE-78
OS Command
|
CVE-2020-25368
|
2024-11-21 14:17 |
2021-11-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209583
|
9.1 |
CRITICAL
Network
|
dlink
|
dir-823g_firmware
|
An issue in the component /cgi-bin/upload_firmware.cgi of D-Link DIR-823G REVA1 1.02B05 allows attackers to cause a denial of service (DoS) via unspecified vectors.
|
CWE-862
Missing Authorization
|
CVE-2020-25366
|
2024-11-21 14:17 |
2021-11-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209584
|
9.8 |
CRITICAL
Network
|
dlink
|
dir-823g_firmware
|
A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbitrary web scripts via shell metacharacter…
|
CWE-78
OS Command
|
CVE-2020-25367
|
2024-11-21 14:17 |
2021-11-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209585
|
5.4 |
MEDIUM
Network
|
mara_cms_project
|
mara_cms
|
A cross site scripting (XSS) vulnerability in menuedit.php of Mara CMS 7.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
|
CWE-79
Cross-site Scripting
|
CVE-2020-25422
|
2024-11-21 14:17 |
2021-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209586
|
9.1 |
CRITICAL
Network
|
rconfig
|
rconfig
|
An arbitrary file deletion vulnerability in rConfig 3.9.5 has been fixed for 3.9.6. This vulnerability gave attackers the ability to send a crafted request to /lib/ajaxHandlers/ajaxDeleteAllLoggingFi…
|
CWE-862
Missing Authorization
|
CVE-2020-25359
|
2024-11-21 14:17 |
2021-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209587
|
6.5 |
MEDIUM
Network
|
rconfig
|
rconfig
|
A server-side request forgery (SSRF) vulnerability in rConfig 3.9.5 has been fixed for 3.9.6. This vulnerability allowed remote authenticated attackers to open a connection to the machine via the dev…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2020-25353
|
2024-11-21 14:17 |
2021-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209588
|
5.4 |
MEDIUM
Network
|
rconfig
|
rconfig
|
A stored cross-site scripting (XSS) vulnerability in the /devices.php function inrConfig 3.9.5 has been fixed for version 3.9.6. This vulnerability allowed remote attackers to perform arbitrary Javas…
|
CWE-79
Cross-site Scripting
|
CVE-2020-25352
|
2024-11-21 14:17 |
2021-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209589
|
6.5 |
MEDIUM
Network
|
rconfig
|
rconfig
|
An information disclosure vulnerability in rConfig 3.9.5 has been fixed for version 3.9.6. This vulnerability allowed remote authenticated attackers to read files on the system via a crafted request …
|
CWE-552
Files or Directories Accessible to External Parties
|
CVE-2020-25351
|
2024-11-21 14:17 |
2021-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209590
|
3.8 |
LOW
Physics
|
nuvoton
|
npct75x_firmware
|
An attacker with physical access to Nuvoton Trusted Platform Module (NPCT75x 7.2.x before 7.2.2.0) could extract an Elliptic Curve Cryptography (ECC) private key via a side-channel attack against ECD…
|
CWE-203
Information Exposure Through Discrepancy
|
CVE-2020-25082
|
2024-11-21 14:17 |
2021-08-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
