|
211121
|
8.8 |
HIGH
Network
|
eyoucms
|
eyoucms
|
A CSRF vulnerability in Eyoucms v1.2.7 allows an attacker to add an admin account via login.php.
|
CWE-352
Origin Validation Error
|
CVE-2020-18129
|
2024-11-21 14:08 |
2020-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211122
|
6.1 |
MEDIUM
Network
|
wso2
|
api_manager
|
WSO2 API Manager 3.1.0 and earlier has reflected XSS on the "publisher" component's admin interface. More precisely, it is possible to inject an XSS payload into the owner POST parameter, which does …
|
CWE-79
Cross-site Scripting
|
CVE-2020-17454
|
2024-11-21 14:08 |
2020-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211123
|
7.8 |
HIGH
Local
|
foxitsoftware
|
foxit_reader phantompdf
|
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the tar…
|
-
|
CVE-2020-17417
|
2024-11-21 14:08 |
2020-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211124
|
7.8 |
HIGH
Local
|
foxitsoftware
|
foxit_reader phantompdf
|
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.0.35798. User interaction is required to exploit this vulnerability in that the tar…
|
-
|
CVE-2020-17416
|
2024-11-21 14:08 |
2020-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211125
|
7.8 |
HIGH
Local
|
foxitsoftware
|
foxit_reader phantompdf
|
This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PhantomPDF 10.0.0.35798. An attacker must first obtain the ability to execute low-privileged code o…
|
-
|
CVE-2020-17415
|
2024-11-21 14:08 |
2020-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211126
|
7.8 |
HIGH
Local
|
foxitsoftware
|
foxit_reader phantompdf
|
This vulnerability allows local attackers to escalate privileges on affected installations of Foxit Reader 10.0.0.35798. An attacker must first obtain the ability to execute low-privileged code on th…
|
-
|
CVE-2020-17414
|
2024-11-21 14:08 |
2020-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211127
|
7.8 |
HIGH
Local
|
foxitsoftware
|
3d
|
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in that the…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-17413
|
2024-11-21 14:08 |
2020-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211128
|
7.8 |
HIGH
Local
|
foxitsoftware
|
3d
|
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in that the…
|
-
|
CVE-2020-17412
|
2024-11-21 14:08 |
2020-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211129
|
3.3 |
LOW
Local
|
foxitsoftware
|
3d
|
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in …
|
-
|
CVE-2020-17411
|
2024-11-21 14:08 |
2020-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211130
|
7.8 |
HIGH
Local
|
foxitsoftware
|
foxit_reader phantompdf
|
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in that the…
|
-
|
CVE-2020-17410
|
2024-11-21 14:08 |
2020-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|