|
209511
|
6.5 |
MEDIUM
Network
|
fusionpbx
|
fusionpbx
|
A Directory Traversal vulnerability exists in FusionPBX 4.5.7 allows malicoius users to rename any file of the system.via the (1) folder, (2) filename, and (3) newfilename variables in app\edit\filer…
|
CWE-22
Path Traversal
|
CVE-2020-21055
|
2024-11-21 14:12 |
2021-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209512
|
6.1 |
MEDIUM
Network
|
fusionpbx
|
fusionpbx
|
Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an unsanitized "f" variable in app\vars\vars_textarea.php.
|
CWE-79
Cross-site Scripting
|
CVE-2020-21054
|
2024-11-21 14:12 |
2021-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209513
|
6.1 |
MEDIUM
Network
|
fusionpbx
|
fusionpbx
|
Cross Site Scriptiong (XSS) vulnerability exists in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an unsanitized "query_string" variable in app\devices\devi…
|
CWE-79
Cross-site Scripting
|
CVE-2020-21053
|
2024-11-21 14:12 |
2021-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209514
|
9.8 |
CRITICAL
Network
|
pluck-cms
|
pluck
|
In Pluck-4.7.10-dev2 admin background, a remote command execution vulnerability exists when uploading files.
|
CWE-77
Command Injection
|
CVE-2020-20951
|
2024-11-21 14:12 |
2021-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209515
|
8.8 |
HIGH
Network
|
gnu
|
libredwg
|
GNU LibreDWG 0.10 is affected by: memcpy-param-overlap. The impact is: execute arbitrary code (remote). The component is: read_2004_section_header ../../src/decode.c:2580.
|
NVD-CWE-Other
|
CVE-2020-21844
|
2024-11-21 14:12 |
2021-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209516
|
8.8 |
HIGH
Network
|
gnu
|
libredwg
|
A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_RC ../../src/bits.c:318.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-21843
|
2024-11-21 14:12 |
2021-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209517
|
8.8 |
HIGH
Network
|
gnu
|
libredwg
|
A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_revhistory ../../src/decode.c:3051.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-21842
|
2024-11-21 14:12 |
2021-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209518
|
8.8 |
HIGH
Network
|
gnu
|
libredwg
|
A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_handles ../../src/decode.c:2637.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-21831
|
2024-11-21 14:12 |
2021-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209519
|
8.8 |
HIGH
Network
|
gnu
|
libredwg
|
A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_B ../../src/bits.c:135.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-21841
|
2024-11-21 14:12 |
2021-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209520
|
8.8 |
HIGH
Network
|
gnu
|
libredwg
|
A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_search_sentinel ../../src/bits.c:1985.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-21840
|
2024-11-21 14:12 |
2021-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|