|
210571
|
7.8 |
HIGH
Local
|
microsoft
|
windows_10 windows_server_2016 windows_server_2019
|
<p>A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrar…
|
CWE-20 CWE-787
Improper Input Validation Out-of-bounds Write
|
CVE-2020-1167
|
2024-11-21 14:09 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210572
|
8.8 |
HIGH
Local
|
microsoft
|
windows_10 windows_server_2019 windows_server_2016
|
<p>An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory. An attacker who successfully exploited these vulnerabilities could …
|
NVD-CWE-noinfo
|
CVE-2020-1080
|
2024-11-21 14:09 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210573
|
7.8 |
HIGH
Local
|
microsoft
|
windows_10 windows_server_2019 windows_server_2016
|
<p>An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory. An attacker who successfully exploited these vulnerabilities could …
|
NVD-CWE-noinfo
|
CVE-2020-1047
|
2024-11-21 14:09 |
2020-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210574
|
5.3 |
MEDIUM
Network
|
alibaba
|
nacos
|
Nacos 1.1.4 is affected by: Incorrect Access Control. An environment can be set up locally to get the service details interface. Then other Nacos service names can be accessed through the service lis…
|
NVD-CWE-noinfo
|
CVE-2020-19676
|
2024-11-21 14:09 |
2020-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210575
|
9.8 |
CRITICAL
Network
|
niushop
|
niushop
|
Niushop B2B2C Multi-business basic version V1.11, can bypass the administrator to obtain the background upload interface, through parameter upload, bypass the getimagesize function, upload php file, …
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-19672
|
2024-11-21 14:09 |
2020-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210576
|
4.9 |
MEDIUM
Network
|
niushop
|
niushop
|
In Niushop B2B2C Multi-Business Basic Edition V1.11, authentication can be bypassed, causing administrators to reset any passwords.
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2020-19670
|
2024-11-21 14:09 |
2020-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210577
|
7.5 |
HIGH
Network
|
jdownloads
|
jdownloads
|
SQL injection exists in the jdownloads 3.2.63 component for Joomla! via components/com_jdownloads/helpers/categories.php, order function via the filter_order parameter.
|
CWE-89
SQL Injection
|
CVE-2020-19455
|
2024-11-21 14:09 |
2020-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210578
|
7.5 |
HIGH
Network
|
jdownloads
|
jdownloads
|
SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, updateLog function via the X-forwarded-for Header parameter.
|
CWE-89
SQL Injection
|
CVE-2020-19451
|
2024-11-21 14:09 |
2020-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210579
|
7.5 |
HIGH
Network
|
jdownloads
|
jdownloads
|
SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, getUserLimits function in the list parameter.
|
CWE-89
SQL Injection
|
CVE-2020-19450
|
2024-11-21 14:09 |
2020-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210580
|
7.5 |
HIGH
Network
|
jdownloads
|
jdownloads
|
SQL injection exists in the jdownloads 3.2.63 component for Joomla! com_jdownloads/models/send.php via the f_marked_files_id parameter.
|
CWE-89
SQL Injection
|
CVE-2020-19447
|
2024-11-21 14:09 |
2020-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|