Search vulnerabilities

Expected end of text, found ':' (at char 25), (line:1, col:26)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,864

CVE-2020-21836

A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_preview ../../src/decode.c:3175.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Gnu
Products
Libredwg
CVE-2020-21835

A null pointer deference issue exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2337.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
Libredwg
CVE-2020-21834

A null pointer deference issue exists in GNU LibreDWG 0.10 via get_bmp ../../programs/dwgbmp.c:164.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
Libredwg
CVE-2020-21833

A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_classes ../../src/decode.c:2440.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Gnu
Products
Libredwg
CVE-2020-21832

A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2417.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Gnu
Products
Libredwg
CVE-2020-21831

A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_handles ../../src/decode.c:2637.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Gnu
Products
Libredwg
CVE-2020-21830

A heap based buffer overflow vulneraibility exists in GNU LibreDWG 0.10 via bit_calc_CRC ../../src/bits.c:2213.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Gnu
Products
Libredwg
CVE-2020-21827

A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2379.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
Libredwg
CVE-2020-21819

A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641via htmlescape ../../programs/escape.c:51.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Gnu
Products
Libredwg
CVE-2020-21818

A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:48.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Gnu
Products
Libredwg
CVE-2020-21817

A null pointer dereference issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:29. which causes a denial of service (application crash).

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
Libredwg
CVE-2020-21816

A heab based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:46.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Gnu
Products
Libredwg
CVE-2020-21815

A null pointer deference issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114, which causes a denial of service (application crash).

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
Libredwg
CVE-2020-21814

A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlwescape ../../programs/escape.c:97.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Gnu
Products
Libredwg
CVE-2020-21813

A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
Libredwg
CVE-2020-21809

SQL Injection vulnerability in NukeViet CMS module Shops 4.0.29 and 4.3 via the (1) listid parameter in detail.php and the (2) group_price or groupid parameters in search_result.php.

CVSS 3.1 · 9.8 Critical EPSS 1.6% KEV · Not listed
Vendors
Nukeviet
Products
Nukeviet
CVE-2020-21808

SQL Injection vulnerability in NukeViet CMS 4.0.10 - 4.3.07 via:the topicsid parameter in modules/news/admin/addtotopics.php.

CVSS 3.1 · 9.8 Critical EPSS 1.6% KEV · Not listed
Vendors
Nukeviet
Products
Nukeviet
CVE-2020-21806

SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php..

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Ectouch
Products
Ectouch
CVE-2020-21788

In CRMEB 3.1.0+ strict domain name filtering leads to SSRF(Server-Side Request Forgery). The vulnerable code is in file /crmeb/app/admin/controller/store/CopyTaobao.php.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Crmeb
Products
Crmeb
CVE-2020-21787

CRMEB 3.1.0+ is vulnerable to File Upload Getshell via /crmeb/crmeb/services/UploadService.php.

CVSS 3.1 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Crmeb
Products
Crmeb