Export limit exceeded: 93114 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (93114 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2020-21082 | 1 Maccms | 1 Maccms | 2024-11-21 | 6.1 Medium |
| A cross-site scripting (XSS) vulnerability in the background administrator article management module of Maccms 8.0 allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese and English names. | ||||
| CVE-2020-21066 | 1 Axiosys | 1 Bento4 | 2024-11-21 | 6.5 Medium |
| An issue was discovered in Bento4 v1.5.1.0. There is a heap-buffer-overflow in AP4_Dec3Atom::AP4_Dec3Atom at Ap4Dec3Atom.cpp, leading to a denial of service (program crash), as demonstrated by mp42aac. | ||||
| CVE-2020-21054 | 1 Fusionpbx | 1 Fusionpbx | 2024-11-21 | 6.1 Medium |
| Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an unsanitized "f" variable in app\vars\vars_textarea.php. | ||||
| CVE-2020-21053 | 1 Fusionpbx | 1 Fusionpbx | 2024-11-21 | 6.1 Medium |
| Cross Site Scriptiong (XSS) vulnerability exists in FusionPBX 4.5.7 allows remote malicious users to inject arbitrary web script or HTML via an unsanitized "query_string" variable in app\devices\device_imports.php. | ||||
| CVE-2020-21003 | 1 Pbootcms | 1 Pbootcms | 2024-11-21 | 4.8 Medium |
| Pbootcms v2.0.3 is vulnerable to Cross Site Scripting (XSS) via admin.php. | ||||
| CVE-2020-20990 | 1 Domainmod | 1 Domainmod | 2024-11-21 | 5.4 Medium |
| A cross site scripting (XSS) vulnerability in the /segments/edit.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via the Segment Name parameter. | ||||
| CVE-2020-20988 | 1 Domainmod | 1 Domainmod | 2024-11-21 | 5.4 Medium |
| A cross site scripting (XSS) vulnerability in the /domains/cost-by-owner.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the "or Expiring Between" parameter. | ||||
| CVE-2020-20982 | 1 Wdja | 1 Wdja Cms | 2024-11-21 | 9.6 Critical |
| Cross Site Scripting (XSS) vulnerability in shadoweb wdja v1.5.1, allows attackers to execute arbitrary code and gain escalated privileges, via the backurl parameter to /php/passport/index.php. | ||||
| CVE-2020-20977 | 1 Ukcms | 1 Ukcms | 2024-11-21 | 5.4 Medium |
| A stored cross site scripting (XSS) vulnerability in index.php/legend/6.html of UK CMS v1.1.10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Comments section. | ||||
| CVE-2020-20951 | 1 Pluck-cms | 1 Pluck | 2024-11-21 | 9.8 Critical |
| In Pluck-4.7.10-dev2 admin background, a remote command execution vulnerability exists when uploading files. | ||||
| CVE-2020-20946 | 1 Qibosoft | 1 Qibosoft | 2024-11-21 | 5.4 Medium |
| Qibosoft v7 contains a stored cross-site scripting (XSS) vulnerability in the component /admin/index.php?lfj=friendlink&action=add. | ||||
| CVE-2020-20908 | 1 Akaunting | 1 Akaunting | 2024-11-21 | 5.4 Medium |
| Akaunting v1.3.17 was discovered to contain a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Company Name input field. | ||||
| CVE-2020-20808 | 1 Qibosoft | 1 Qibosoft | 2024-11-21 | 6.1 Medium |
| Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker to execute arbitrary code via the eindtijd and starttijd parameters of do/search.php. | ||||
| CVE-2020-20799 | 1 Jeecms | 1 Jeecms | 2024-11-21 | 5.4 Medium |
| JeeCMS 1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the commentText parameter. | ||||
| CVE-2020-20781 | 1 Ucms Project | 1 Ucms | 2024-11-21 | 5.4 Medium |
| A stored cross-site scripting (XSS) vulnerability in /ucms/index.php?do=list_edit of UCMS 1.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title, key words, description or content text fields. | ||||
| CVE-2020-20746 | 1 Tendacn | 2 Ac9, Ac9 Firmware | 2024-11-21 | 7.2 High |
| A stack-based buffer overflow in the httpd server on Tenda AC9 V15.03.06.60_EN allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via a crafted POST request to /goform/SetStaticRouteCfg. | ||||
| CVE-2020-20740 | 3 Debian, Fedoraproject, Pdfresurrect Project | 3 Debian Linux, Fedora, Pdfresurrect | 2024-11-21 | 7.8 High |
| PDFResurrect before 0.20 lack of header validation checks causes heap-buffer-overflow in pdf_get_version(). | ||||
| CVE-2020-20701 | 1 S-cms | 1 S-cms | 2024-11-21 | 4.8 Medium |
| A stored cross site scripting (XSS) vulnerability in /app/config/of S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. | ||||
| CVE-2020-20700 | 1 S-cms | 1 S-cms | 2024-11-21 | 4.8 Medium |
| A stored cross site scripting (XSS) vulnerability in /app/form_add/of S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Title Entry text box. | ||||
| CVE-2020-20699 | 1 S-cms | 1 S-cms | 2024-11-21 | 4.8 Medium |
| A cross site scripting (XSS) vulnerability in S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Copyright text box under Basic Settings. | ||||