|
210401
|
8.8 |
HIGH
Network
|
ebcms
|
ebcms
|
File upload vulnerability in ebCMS v.1.1.0 allows a remote attacker to execute arbitrary code via the upload type parameter.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-20067
|
2024-11-21 14:11 |
2023-06-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210402
|
9.8 |
CRITICAL
Network
|
sudytech
|
webplus_pro
|
WebPlus Pro v1.4.7.8.4-01 is vulnerable to Incorrect Access Control.
|
CWE-22
Path Traversal
|
CVE-2020-20012
|
2024-11-21 14:11 |
2023-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210403
|
7.2 |
HIGH
Network
|
moodle
|
moodle
|
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, insufficient input escaping was applied to the PHP unit webrunner admin tool.
|
CWE-20
Improper Input Validation
|
CVE-2020-1756
|
2024-11-21 14:11 |
2022-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210404
|
5.3 |
MEDIUM
Network
|
moodle
|
moodle
|
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, X-Forwarded-For headers could be used to spoof a user's IP, in order to bypass remote address checks.
|
CWE-345
Insufficient Verification of Data Authenticity
|
CVE-2020-1755
|
2024-11-21 14:11 |
2022-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210405
|
4.3 |
MEDIUM
Network
|
moodle
|
moodle
|
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own grou…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2020-1754
|
2024-11-21 14:11 |
2022-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210406
|
5.4 |
MEDIUM
Network
|
moodle
|
moodle
|
In Moodle 3.8, messages required extra sanitizing before updating the conversation overview, to prevent the risk of stored cross-site scripting.
|
CWE-79
Cross-site Scripting
|
CVE-2020-1691
|
2024-11-21 14:11 |
2022-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210407
|
6.5 |
MEDIUM
Network
|
whatsapp
|
whatsapp
|
Whatsapp iOS 2.19.80 and prior and Android 2.19.222 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages.
|
NVD-CWE-Other
|
CVE-2020-20096
|
2024-11-21 14:11 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210408
|
6.5 |
MEDIUM
Network
|
apple
|
imessage
|
iMessage (Messages app) iOS 12.4 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages.
|
NVD-CWE-Other
|
CVE-2020-20095
|
2024-11-21 14:11 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210409
|
6.5 |
MEDIUM
Network
|
facebook
|
instagram
|
Instagram iOS 106.0 and prior and Android 107.0.0.11 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages
|
NVD-CWE-Other
|
CVE-2020-20094
|
2024-11-21 14:11 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210410
|
6.5 |
MEDIUM
Network
|
facebook
|
messenger
|
The Facebook Messenger app for iOS 227.0 and prior and Android 228.1.0.10.116 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via speciall…
|
NVD-CWE-Other
|
CVE-2020-20093
|
2024-11-21 14:11 |
2022-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|