CVE's - CVE Vulnerability

CVE

Vendors

Products

Updated

CVSS v2

CVSS v3

CVE-2020-2061

2022-12-30

N/A

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.

CVE-2020-20605

2021-12-23

N/A

6.1 MEDIUM

Blog CMS v1.0 contains a cross-site scripting (XSS) vulnerability in the /controller/CommentAdminController.java component.

CVE-2020-20601

2022-07-12

N/A

9.8 CRITICAL

An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet.

CVE-2020-20600

2021-12-23

N/A

5.4 MEDIUM

MetInfo 7.0 beta contains a stored cross-site scripting (XSS) vulnerability in the $name parameter of admin/?n=column&c=index&a=doAddColumn.

CVE-2020-20598

2021-12-23

N/A

6.1 MEDIUM

A cross-site scripting (XSS) vulnerability in the Editing component of lemon V1.10.0 allows attackers to execute arbitrary web scripts or HTML.

CVE-2020-20597

2021-12-23

N/A

6.1 MEDIUM

A cross-site scripting (XSS) vulnerability in the potrtalItemName parameter in webPortalController.java of lemon V1.10.0 allows attackers to execute arbitrary web scripts or HTML.

CVE-2020-20595

2021-12-23

N/A

6.5 MEDIUM

A cross-site request forgery (CSRF) in OPMS v1.3 and below allows attackers to arbitrarily add a user account via /user/add.

CVE-2020-20593

2021-12-28

N/A

8 HIGH

A cross-site request forgery (CSRF) in Rockoa v1.9.8 allows an authenticated attacker to arbitrarily add an administrator account.

CVE-2020-2059

2022-12-30

N/A

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.

CVE-2020-20589

2022-12-17

N/A

6.1 MEDIUM

Cross Site Scripting (XSS) vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag.

« Previous 1 … 4,202 4,203 4,204 4,205 4,206 … 11,258 Next »