Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (341161 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-5525 1 Nec 6 Aterm Wf1200c, Aterm Wf1200c Firmware, Aterm Wg1200cr and 3 more 2024-11-21 8.0 High
Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier) allows an authenticated attacker on the same network segment to execute arbitrary OS commands with root privileges via management screen.
CVE-2020-5524 1 Nec 6 Aterm Wf1200c, Aterm Wf1200c Firmware, Aterm Wg1200cr and 3 more 2024-11-21 8.8 High
Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier) allows an attacker on the same network segment to execute arbitrary OS commands with root privileges via UPnP function.
CVE-2020-5523 9 77bank, Ashikagabank, Hokkaidobank and 6 more 9 77 Bank, Ashigin, Dogin and 6 more 2024-11-21 7.4 High
Android App 'MyPallete' and some of the Android banking applications based on 'MyPallete' do not verify X.509 certificates from servers, and also do not properly validate certificates with host-mismatch, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2020-5522 1 Fujixerox 1 Easy Netprint 2024-11-21 7.4 High
The kantan netprint App for Android 2.0.3 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2020-5521 1 Fujixerox 1 Easy Netprint 2024-11-21 7.4 High
The kantan netprint App for iOS 2.0.2 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2020-5520 1 Fujixerox 1 Netprint 2024-11-21 7.4 High
The netprint App for iOS 3.2.3 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2020-5519 1 Litespeedtech 1 Openlitespeed 2024-11-21 9.8 Critical
The WebAdmin Console in OpenLiteSpeed before v1.6.5 does not strictly check request URLs, as demonstrated by the "Server Configuration > External App" screen.
CVE-2020-5517 1 Blueonyx 2 5209r, 5209r Firmware 2024-11-21 6.5 Medium
CSRF in the /login URI in BlueOnyx 5209R allows an attacker to access the dashboard and perform scraping or other analysis.
CVE-2020-5515 1 Gilacms 1 Gila Cms 2024-11-21 7.2 High
Gila CMS 1.11.8 allows /admin/sql?query= SQL Injection.
CVE-2020-5514 1 Gilacms 1 Gila Cms 2024-11-21 9.1 Critical
Gila CMS 1.11.8 allows Unrestricted Upload of a File with a Dangerous Type via .phar or .phtml to the lzld/thumb?src= URI.
CVE-2020-5513 1 Gilacms 1 Gila Cms 2024-11-21 6.8 Medium
Gila CMS 1.11.8 allows /cm/delete?t=../ Directory Traversal.
CVE-2020-5512 1 Gilacms 1 Gila Cms 2024-11-21 6.8 Medium
Gila CMS 1.11.8 allows /admin/media?path=../ Path Traversal.
CVE-2020-5511 1 Small Crm Project 1 Small Crm 2024-11-21 8.8 High
PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administrator login page.
CVE-2020-5509 1 Phpgurukul 1 Car Rental Portal 2024-11-21 7.2 High
PHPGurukul Car Rental Project v1.0 allows Remote Code Execution via an executable file in an upload of a new profile image.
CVE-2020-5505 1 Vaaip 1 Freelancy 2024-11-21 9.8 Critical
Freelancy v1.0.0 allows remote command execution via the "file":"data:application/x-php;base64 substring (in conjunction with "type":"application/x-php"} to the /api/files/ URI.
CVE-2020-5502 1 Phpbb 1 Phpbb 2024-11-21 6.5 Medium
phpBB 3.2.8 allows a CSRF attack that can approve pending group memberships.
CVE-2020-5501 1 Phpbb 1 Phpbb 2024-11-21 4.3 Medium
phpBB 3.2.8 allows a CSRF attack that can modify a group avatar.
CVE-2020-5499 1 Apache 1 Rust Sgx Sdk 2024-11-21 9.8 Critical
Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in which, sometimes, two global IDs are the same.
CVE-2020-5497 1 Mitreid 1 Connect 2024-11-21 6.1 Medium
The OpenID Connect reference implementation for MITREid Connect through 1.3.3 allows XSS due to userInfoJson being included in the page unsanitized. This is related to header.tag. The issue can be exploited to execute arbitrary JavaScript.
CVE-2020-5496 2 Fontforge, Opensuse 2 Fontforge, Leap 2024-11-21 8.8 High
FontForge 20190801 has a heap-based buffer overflow in the Type2NotDefSplines() function in splinesave.c.