CVE's - CVE Vulnerability

CVE

Vendors

Products

Updated

CVSS v2

CVSS v3

CVE-2020-2223

2020-07-21

N/A

5.4 MEDIUM

Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape correctly the 'href' attribute of links to downstream jobs displayed in the build console page, resulting in a stored cross-site scripting vulnerability.

CVE-2020-22226

2021-11-09

N/A

9.8 CRITICAL

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionSetAmount function.

CVE-2020-22225

2021-11-09

N/A

9.8 CRITICAL

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoadForm function.

CVE-2020-22224

2021-11-09

N/A

6.1 MEDIUM

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the pjActionPreview function.

CVE-2020-22223

2021-11-09

N/A

9.8 CRITICAL

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoad function.

CVE-2020-22222

2021-11-09

N/A

6.1 MEDIUM

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the pjActionLoadCss function.

CVE-2020-2222

2020-07-21

N/A

5.4 MEDIUM

Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the job name in the 'Keep this build forever' badge tooltip, resulting in a stored cross-site scripting vulnerability.

CVE-2020-22212

2021-06-21

N/A

9.8 CRITICAL

SQL Injection in 74cms 3.2.0 via the id parameter to wap/wap-company-show.php.

CVE-2020-22211

2021-06-21

N/A

9.8 CRITICAL

SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajax_street.php.

CVE-2020-22210

2021-06-21

N/A

9.8 CRITICAL

SQL Injection in 74cms 3.2.0 via the x parameter to ajax_officebuilding.php.

« Previous 1 … 4,149 4,150 4,151 4,152 4,153 … 11,258 Next »