Export limit exceeded: 92850 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (92850 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2020-10519 | 1 Github | 1 Github | 2024-11-21 | 8.8 High |
| A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. User-controlled configuration of the underlying parsers used by GitHub Pages were not sufficiently restricted and made it possible to execute commands on the GitHub Enterprise Server instance. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to 2.22.7 and was fixed in 2.22.7, 2.21.15, and 2.20.24. The underlying issues contributing to this vulnerability were identified through the GitHub Security Bug Bounty program. | ||||
| CVE-2020-10518 | 1 Github | 1 Github | 2024-11-21 | 8.8 High |
| A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. User-controlled configuration of the underlying parsers used by GitHub Pages were not sufficiently restricted and made it possible to execute commands on the GitHub Enterprise Server instance. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to 2.22 and was fixed in 2.21.6, 2.20.15, and 2.19.21. The underlying issues contributing to this vulnerability were identified both internally and through the GitHub Security Bug Bounty program. | ||||
| CVE-2020-10514 | 1 Icatchinc | 1 Dvr Firmware | 2024-11-21 | 8.8 High |
| iCatch DVR firmware before 20200103 do not validate function parameter properly, resulting attackers executing arbitrary command. | ||||
| CVE-2020-10513 | 1 Icatchinc | 1 Dvr Interface | 2024-11-21 | 8.8 High |
| The file management interface of iCatch DVR firmware before 20200103 contains broken access control which allows the attacker to remotely manipulate arbitrary file. | ||||
| CVE-2020-10511 | 1 Hgiga | 1 Oaklouds Ccm\@il | 2024-11-21 | 9.8 Critical |
| HGiga C&Cmail CCMAILQ before olln-base-6.0-418.i386.rpm and CCMAILN before olln-base-5.0-418.i386.rpm contains insecure configurations. Attackers can exploit these flaws to access unauthorized functionality via a crafted URL. | ||||
| CVE-2020-10509 | 1 Sun | 1 Ehrd | 2024-11-21 | 6.1 Medium |
| Sunnet eHRD, a human training and development management system, contains vulnerability of Cross-Site Scripting (XSS), attackers can inject arbitrary command into the system and launch XSS attack. | ||||
| CVE-2020-10477 | 1 Chadhaajay | 1 Phpkb | 2024-11-21 | 4.8 Medium |
| Reflected XSS in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort. | ||||
| CVE-2020-10476 | 1 Chadhaajay | 1 Phpkb | 2024-11-21 | 4.8 Medium |
| Reflected XSS in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort. | ||||
| CVE-2020-10475 | 1 Chadhaajay | 1 Phpkb | 2024-11-21 | 4.8 Medium |
| Reflected XSS in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort. | ||||
| CVE-2020-10474 | 1 Chadhaajay | 1 Phpkb | 2024-11-21 | 4.8 Medium |
| Reflected XSS in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort. | ||||
| CVE-2020-10473 | 1 Chadhaajay | 1 Phpkb | 2024-11-21 | 4.8 Medium |
| Reflected XSS in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort. | ||||
| CVE-2020-10472 | 1 Chadhaajay | 1 Phpkb | 2024-11-21 | 4.8 Medium |
| Reflected XSS in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort. | ||||
| CVE-2020-10471 | 1 Chadhasoftware | 1 Phpkb | 2024-11-21 | 4.8 Medium |
| Reflected XSS in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort. | ||||
| CVE-2020-10470 | 1 Chadhaajay | 1 Phpkb | 2024-11-21 | 4.8 Medium |
| Reflected XSS in admin/manage-fields.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort. | ||||
| CVE-2020-10469 | 1 Chadhaajay | 1 Phpkb | 2024-11-21 | 4.8 Medium |
| Reflected XSS in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort. | ||||
| CVE-2020-10468 | 1 Chadhaajay | 1 Phpkb | 2024-11-21 | 4.8 Medium |
| Reflected XSS in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p. | ||||
| CVE-2020-10467 | 1 Chadhaajay | 1 Phpkb | 2024-11-21 | 4.8 Medium |
| Reflected XSS in admin/edit-comment.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p. | ||||
| CVE-2020-10466 | 1 Chadhaajay | 1 Phpkb | 2024-11-21 | 4.8 Medium |
| Reflected XSS in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p. | ||||
| CVE-2020-10465 | 1 Chadhaajay | 1 Phpkb | 2024-11-21 | 4.8 Medium |
| Reflected XSS in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p. | ||||
| CVE-2020-10464 | 1 Chadhaajay | 1 Phpkb | 2024-11-21 | 4.8 Medium |
| Reflected XSS in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p. | ||||