CVE
Vendors
Products
Updated
CVSS v2
CVSS v3
Cross Site Request Forgery (CSRF) vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B, via all fields to WebUI.
Apache Ignite uses H2 database to build SQL distributed execution engine. H2 provides SQL functions which could be used by attacker to access to a filesystem.
Cross Site Scripting (XSS) vulnerability in craftcms 3.1.31, allows remote attackers to inject arbitrary web script or HTML, via /admin/settings/sites/new.
Remote Code Execution Vulnerability in tests/support/stores/test_grid_filter.php in oria gridx 1.3, allows remote attackers to execute arbitrary code, via crafted value to the $query parameter.
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none.
Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the signature field to /settings/profile.
Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the post content field to /post/editing.
Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the nickname field to /settings/profile.
Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the post header field to /post/editing.
Server Side Request Forgery (SSRF) vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503.
