|
201811
|
8.8 |
HIGH
Network
|
dext5
|
dext5upload
|
DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. Thi…
|
CWE-494
Download of Code Without Integrity Check
|
CVE-2020-7875
|
2024-11-21 14:37 |
2021-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
201812
|
7.8 |
HIGH
Local
|
helpu
|
helpuviewer
|
An improper input validation vulnerability in Helpu solution could allow a local attacker to arbitrary file creation and execution without click file transfer menu. It is possible to file in arbitrar…
|
CWE-20
Improper Input Validation
|
CVE-2020-7867
|
2024-11-21 14:37 |
2021-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
201813
|
8.8 |
HIGH
Network
|
tobesoft
|
nexacro
|
Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows the attacker to cause an arbitrary file download and execution. This vulnerabil…
|
CWE-494
Download of Code Without Integrity Check
|
CVE-2020-7874
|
2024-11-21 14:37 |
2021-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
201814
|
9.8 |
CRITICAL
Network
|
ksystem
|
k-system_wellcomm
|
Download of code without integrity check vulnerability in ActiveX control of Younglimwon Co., Ltd allows the attacker to cause a arbitrary file download and execution.
|
CWE-494
Download of Code Without Integrity Check
|
CVE-2020-7873
|
2024-11-21 14:37 |
2021-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
201815
|
9.8 |
CRITICAL
Network
|
inoguard
|
execm_coreb2b
|
A vulnerability(improper input validation) in the ExECM CoreB2B solution allows an unauthenticated attacker to download and execute an arbitrary file via httpDownload function. A successful exploit c…
|
CWE-20
Improper Input Validation
|
CVE-2020-7865
|
2024-11-21 14:37 |
2021-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
201816
|
9.8 |
CRITICAL
Network
|
dext5
|
dext5
|
A vulnerability (improper input validation) in the DEXT5 Upload solution allows an unauthenticated attacker to download and execute an arbitrary file via AddUploadFile, SetSelectItem, DoOpenFile func…
|
CWE-20
Improper Input Validation
|
CVE-2020-7832
|
2024-11-21 14:37 |
2021-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
201817
|
7.5 |
HIGH
Network
|
ntracker
|
ntracker_usb_enterprise
|
A SQL-Injection vulnerability in the nTracker USB Enterprise(secure USB management solution) allows a remote unauthenticated attacker to perform SQL query to access username password and other sessio…
|
CWE-89
SQL Injection
|
CVE-2020-7819
|
2024-11-21 14:37 |
2021-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
201818
|
8.8 |
HIGH
Network
|
mastersoft
|
zook_agent zook_viewer
|
A buffer overflow issue was discovered in ZOOK solution(remote administration tool) through processing 'ConnectMe' command while parsing a crafted OUTERIP value because of missing boundary check. Thi…
|
CWE-120
Classic Buffer Overflow
|
CVE-2020-7877
|
2024-11-21 14:37 |
2021-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
201819
|
8.8 |
HIGH
Network
|
raonwiz
|
raon_k_upload
|
A vulnerability in File Transfer Solution of Raonwiz could allow arbitrary command execution as the result of viewing a specially-crafted web page. This vulnerability is due to insufficient validatio…
|
CWE-20
Improper Input Validation
|
CVE-2020-7863
|
2024-11-21 14:37 |
2021-08-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
201820
|
5.4 |
MEDIUM
Network
|
sage
|
syracuse
|
Sage X3 Stored XSS Vulnerability on ‘Edit’ Page of User Profile. An authenticated user can pass XSS strings the "First Name," "Last Name," and "Email Address" fields of this web application component…
|
CWE-79
Cross-site Scripting
|
CVE-2020-7390
|
2024-11-21 14:37 |
2021-07-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|