|
210141
|
7.2 |
HIGH
Network
|
tendacn
|
ac9_firmware
|
A stack-based buffer overflow in the httpd server on Tenda AC9 V15.03.06.60_EN allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via a crafted POST request to /gofo…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-20746
|
2024-11-21 14:12 |
2021-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210142
|
7.5 |
HIGH
Network
|
rudp_project
|
rudp
|
rudp v0.6 was discovered to contain a memory leak in the component main.c.
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2020-20665
|
2024-11-21 14:12 |
2021-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210143
|
6.5 |
MEDIUM
Network
|
libiec_iccp_mod_project
|
libiec_iccp_mod
|
libiec_iccp_mod v1.5 contains a segmentation violation in the component server_example1.c.
|
NVD-CWE-noinfo
|
CVE-2020-20664
|
2024-11-21 14:12 |
2021-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210144
|
6.5 |
MEDIUM
Network
|
libiec_iccp_mod_project
|
libiec_iccp_mod
|
libiec_iccp_mod v1.5 contains a heap-buffer-overflow in the component mms_client_connection.c.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-20663
|
2024-11-21 14:12 |
2021-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210145
|
6.5 |
MEDIUM
Network
|
libiec_iccp_mod_project
|
libiec_iccp_mod
|
libiec_iccp_mod v1.5 contains a heap-buffer-overflow in the component mms_client_example1.c.
|
CWE-787
Out-of-bounds Write
|
CVE-2020-20662
|
2024-11-21 14:12 |
2021-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210146
|
5.4 |
MEDIUM
Network
|
ucms_project
|
ucms
|
A stored cross-site scripting (XSS) vulnerability in /ucms/index.php?do=list_edit of UCMS 1.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title, key words…
|
CWE-79
Cross-site Scripting
|
CVE-2020-20781
|
2024-11-21 14:12 |
2021-09-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210147
|
5.4 |
MEDIUM
Network
|
gilacms
|
gila_cms
|
A cross-site scripting (XSS) vulnerability in /admin/content/post of GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Tags field.
|
CWE-79
Cross-site Scripting
|
CVE-2020-20696
|
2024-11-21 14:12 |
2021-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210148
|
5.4 |
MEDIUM
Network
|
gilacms
|
gila_cms
|
A stored cross-site scripting (XSS) vulnerability in GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file.
|
CWE-79
Cross-site Scripting
|
CVE-2020-20695
|
2024-11-21 14:12 |
2021-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210149
|
8.8 |
HIGH
Network
|
gilacms
|
gila_cms
|
A Cross-Site Request Forgery (CSRF) in GilaCMS v1.11.4 allows authenticated attackers to arbitrarily add administrator accounts.
|
CWE-352
Origin Validation Error
|
CVE-2020-20693
|
2024-11-21 14:12 |
2021-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210150
|
7.2 |
HIGH
Network
|
gilacms
|
gila_cms
|
GilaCMS v1.11.4 was discovered to contain a SQL injection vulnerability via the $_GET parameter in /src/core/controllers/cm.php.
|
CWE-89
SQL Injection
|
CVE-2020-20692
|
2024-11-21 14:12 |
2021-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|