Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-21146 State: PUBLISHED Published: 2021-01-21T20:42:13 Last Updated: 2024-08-04T14:22:25.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Feehi CMS 2.0.8 is affected by a cross-site scripting (XSS) vulnerability. When the user name is inserted as JavaScript code, browsing the post will trigger the XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/liufee/cms/issues/43
CVE ID: CVE-2020-21147 State: PUBLISHED Published: 2021-01-21T20:42:43 Last Updated: 2024-08-04T14:22:25.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: RockOA V1.9.8 is affected by a cross-site scripting (XSS) vulnerability which allows remote attackers to send malicious code to the administrator and execute JavaScript code, because webmain/flow/input/mode_emailmAction.php does not perform strict filtering. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/alixiaowei/alixiaowei.github.io/issues/2 - https://blog.csdn.net/adminxw/article/details/102881463
CVE ID: CVE-2020-21152 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T12:59:27.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in inxedu 2.0.6 allows attackers to execute arbitrary commands via the functionIds parameter to /saverolefunction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://8sec.cc/index.php/archives/330/ - https://gitee.com/inxeduopen/inxedu/issues/I14DNG
CVE ID: CVE-2020-21161 State: PUBLISHED Published: 2022-06-27T14:56:39 Last Updated: 2024-08-04T14:22:25.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Ruckus Wireless ZoneDirector 9.8.3.0. Additional Analyst Notes: - CVE Program Container: References: - http://ruckus.com - http://zonedirector.com - https://dollahibrahim.blogspot.com/2019/11/cross-site-scripting-on-ruckus.html
CVE ID: CVE-2020-21174 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-10T16:41:56.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulenrability in liufee CMS v.2.0.7.1 allows a remote attacker to execute arbitrary code via the image suffix function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/liufee/cms/issues/44
CVE ID: CVE-2020-21176 State: PUBLISHED Published: 2021-02-01T17:37:56 Last Updated: 2024-08-04T14:22:25.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the model.increment and model.decrement function in ThinkJS 3.2.10 allows remote attackers to execute arbitrary SQL commands via the step parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/thinkjs/thinkjs - https://blog.jiguang.xyz/posts/thinkjs-sql-injection/
CVE ID: CVE-2020-21179 State: PUBLISHED Published: 2021-02-01T17:38:00 Last Updated: 2024-08-04T14:22:25.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sql injection vulnerability in koa2-blog 1.0.0 allows remote attackers to Injecting a malicious SQL statement via the name parameter to the signin page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wclimb/Koa2-blog/issues/40
CVE ID: CVE-2020-21180 State: PUBLISHED Published: 2021-02-01T17:38:05 Last Updated: 2024-08-04T14:22:25.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sql injection vulnerability in koa2-blog 1.0.0 allows remote attackers to Injecting a malicious SQL statement via the name parameter to the signup page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wclimb/Koa2-blog/issues/41
CVE ID: CVE-2020-21219 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-25T14:34:36.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Netgate pf Sense 2.4.4-Release-p3 and Netgate ACME package 0.6.3 allows remote attackers to to run arbitrary code via the RootFolder field to acme_certificate_edit.php page of the ACME package. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pfsense/FreeBSD-ports/commit/a6f443cde51e7fcf17e51f16014d3589253284d8 - https://redmine.pfsense.org/issues/9888
CVE ID: CVE-2020-21224 State: PUBLISHED Published: 2021-02-22T15:00:07 Last Updated: 2024-08-04T14:22:25.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.0. A remote attacker can send a malicious login packet to the control server Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NS-Sp4ce/Inspur/tree/master/ClusterEngineV4.0%20Vul - https://github.com/NS-Sp4ce/Inspur/
CVE ID: CVE-2020-21228 State: PUBLISHED Published: 2021-10-01T20:49:52 Last Updated: 2024-08-04T14:22:25.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: JIZHICMS 1.5.1 contains a cross-site scripting (XSS) vulnerability in the component /user/release.html, which allows attackers to arbitrarily add an administrator cookie. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cherry-toto/jizhicms - http://jizhicms.com - https://github.com/Cherry-toto/jizhicms/issues/16
CVE ID: CVE-2020-21236 State: PUBLISHED Published: 2021-12-27T22:22:58 Last Updated: 2024-08-04T14:22:25.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows attackers to compromise and impersonate user accounts via obtaining a user's session cookie. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wind-cyber/DamiCMS-v6.0.0-have-csrf-and-xss-Vulnerabilities-/blob/master/README.md
CVE ID: CVE-2020-21237 State: PUBLISHED Published: 2021-12-27T22:22:59 Last Updated: 2024-08-04T14:22:25.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the user login box of LJCMS v1.11 allows attackers to hijack user accounts via brute force attacks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wind-cyber/LJCMS-UserTraversal-Vulnerability
CVE ID: CVE-2020-21238 State: PUBLISHED Published: 2021-12-27T22:23:00 Last Updated: 2024-08-04T14:22:25.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the user login box of CSCMS v4.0 allows attackers to hijack user accounts via brute force attacks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chshcms/cscms/issues/5
CVE ID: CVE-2020-21244 State: PUBLISHED Published: 2020-09-30T14:06:32 Last Updated: 2024-08-04T14:22:25.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FrontAccounting 2.4.7. There is a Directory Traversal vulnerability that can empty folder via admin/inst_lang.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FrontAccountingERP/FA/issues/40
CVE ID: CVE-2020-21246 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-10T16:32:35.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in YiiCMS v.1.0 allows a remote attacker to execute arbitrary code via the news function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yongshengli/yiicms/issues/6
CVE ID: CVE-2020-21250 State: PUBLISHED Published: 2021-10-27T19:00:18 Last Updated: 2024-08-04T14:22:25.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSZ CMS v1.2.4 was discovered to contain an arbitrary file upload vulnerability in the component /core/MY_Security.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cskaza/cszcms/issues/22
CVE ID: CVE-2020-21252 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-10T16:12:14.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to execute arbitrary code and escalate privileges via the updateusers parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Neeke/HongCMS/issues/13
CVE ID: CVE-2020-21266 State: PUBLISHED Published: 2020-10-29T13:32:27 Last Updated: 2024-08-04T14:22:25.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Broadleaf Commerce 5.1.14-GA is affected by cross-site scripting (XSS) due to a slow HTTP post vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadleafcommerce.com/docs/core/5.1/release-notes/5.1.15-ga
CVE ID: CVE-2020-21268 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-09T21:23:51.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in EasySoft ZenTao v.11.6.4 allows a remote attacker to execute arbitrary code via the lastComment parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/easysoft/zentaopms/issues/40
CVE ID: CVE-2020-21316 State: PUBLISHED Published: 2021-06-15T17:15:24 Last Updated: 2024-08-04T14:22:25.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-site scripting (XSS) vulnerability exists in the comment section in ZrLog 2.1.3, which allows remote attackers to inject arbitrary web script and stolen administrator cookies via the nickname parameter and gain access to the admin panel. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/94fzb/zrlog/issues/56 - https://gist.github.com/T-pod/d9405dbd61243990d65d55c5df0fcbe6 - https://github.com/94fzb/zrlog/commit/b921c1ae03b8290f438657803eee05226755c941
CVE ID: CVE-2020-21321 State: PUBLISHED Published: 2021-09-15T21:17:09 Last Updated: 2024-08-04T14:22:25.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: emlog v6.0 contains a Cross-Site Request Forgery (CSRF) via /admin/link.php?action=addlink, which allows attackers to arbitrarily add articles. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/emlog/emlog/issues/50
CVE ID: CVE-2020-21322 State: PUBLISHED Published: 2021-09-15T21:17:10 Last Updated: 2024-08-04T14:22:25.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in Feehi CMS v2.0.8 and below allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/liufee/cms/issues/44
CVE ID: CVE-2020-21325 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-09T21:22:56.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in WUZHI CMS v.4.1.0 allows a remote attacker to execute arbitrary code via the set_chache method of the function\common.func.php file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wuzhicms/wuzhicms/issues/188
CVE ID: CVE-2020-21333 State: PUBLISHED Published: 2021-07-09T16:41:17 Last Updated: 2024-08-04T14:22:25.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in PublicCMS 4.0 to get an admin cookie when the Administrator reviews submit case. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sanluan/PublicCMS/issues/27
CVE ID: CVE-2020-21342 State: PUBLISHED Published: 2021-05-13T14:42:56 Last Updated: 2024-08-04T14:22:25.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions issue in zzcms 201910 via the reset any user password in /one/getpassword.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ksharp12138/zzcms/issues/1
CVE ID: CVE-2020-21345 State: PUBLISHED Published: 2021-05-20T16:51:50 Last Updated: 2024-08-04T14:22:25.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Halo 1.1.3 via post publish components in the manage panel, which lets a remote malicious user execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/halo-dev/halo/issues/336
CVE ID: CVE-2020-21353 State: PUBLISHED Published: 2021-08-06T22:36:18 Last Updated: 2024-08-04T14:22:25.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross site scripting (XSS) vulnerability in /admin/snippets.php of GetSimple CMS 3.4.0a allows attackers to execute arbitrary web scripts or HTML via crafted payload in the Edit Snippets module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1319
CVE ID: CVE-2020-21356 State: PUBLISHED Published: 2021-08-06T22:36:55 Last Updated: 2024-08-04T14:22:25.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information disclosure vulnerability in upload.php of PopojiCMS 1.2 leads to physical path disclosure of the host when 'name = "file" is deleted during file uploads. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PopojiCMS/PopojiCMS/issues/23
CVE ID: CVE-2020-21357 State: PUBLISHED Published: 2021-08-06T22:37:16 Last Updated: 2024-08-04T14:22:25.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross site scripting (XSS) vulnerability in /admin.php?mod=user&act=addnew of PopojiCMS 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the E-Mail field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PopojiCMS/PopojiCMS/issues/24
CVE ID: CVE-2020-21358 State: PUBLISHED Published: 2021-08-06T22:37:38 Last Updated: 2024-08-04T14:30:32.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross site request forgery (CSRF) in Wage-CMS 1.5.x-dev allows attackers to arbitrarily add users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WXiangQian/wage-cms/issues/1
CVE ID: CVE-2020-21359 State: PUBLISHED Published: 2021-08-11T20:53:54 Last Updated: 2024-08-04T14:30:31.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the Template Upload function of Maccms10 allows attackers bypass the suffix whitelist verification to execute arbitrary code via adding a character to the end of the uploaded file's name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/magicblack/maccms10/issues/80
CVE ID: CVE-2020-21362 State: PUBLISHED Published: 2021-08-11T20:53:57 Last Updated: 2024-08-04T14:30:32.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross site scripting (XSS) vulnerability in the background search function of Maccms10 allows attackers to execute arbitrary web scripts or HTML via the 'wd' parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/magicblack/maccms10/issues/78
CVE ID: CVE-2020-21363 State: PUBLISHED Published: 2021-08-11T20:53:58 Last Updated: 2024-08-04T14:30:32.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file deletion vulnerability exists within Maccms10. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/magicblack/maccms10/issues/79
CVE ID: CVE-2020-21365 State: PUBLISHED Published: 2022-08-15T00:00:00 Last Updated: 2024-08-04T14:30:32.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wkhtmltopdf/wkhtmltopdf/issues/4536 - https://lists.debian.org/debian-lts-announce/2022/10/msg00027.html
CVE ID: CVE-2020-21366 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-10T15:46:34.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery vulnerability in GreenCMS v.2.3 allows an attacker to gain privileges via the adduser function of index.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GreenCMS/GreenCMS/issues/115
CVE ID: CVE-2020-21377 State: PUBLISHED Published: 2020-12-21T18:50:32 Last Updated: 2024-08-04T14:30:31.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in yunyecms V2.0.1 via the selcart parameter. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/yunyecms/yunyecms/issues/I15J32?from=project-issue
CVE ID: CVE-2020-21378 State: PUBLISHED Published: 2020-12-21T18:50:35 Last Updated: 2024-08-04T14:30:33.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SeaCMS 10.1 (2020.02.08) via the id parameter in an edit action to admin_members_group.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hackxf/cms_vul/blob/master/SeacmsSQL.md
CVE ID: CVE-2020-21386 State: PUBLISHED Published: 2021-10-04T19:18:54 Last Updated: 2024-08-04T14:30:32.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in the component admin.php/admin/type/info.html of Maccms 10 allows attackers to gain administrator privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/magicblack/maccms10/issues/126
CVE ID: CVE-2020-21387 State: PUBLISHED Published: 2021-10-04T19:18:55 Last Updated: 2024-08-04T14:30:32.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the parameter type_en of Maccms 10 allows attackers to obtain the administrator cookie and escalate privileges via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/magicblack/maccms10/issues/126
CVE ID: CVE-2020-21394 State: PUBLISHED Published: 2021-06-29T16:56:43 Last Updated: 2024-08-04T14:30:32.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1 via the tablename parameter in SystemDatabackup.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mumu0215/cve_reference/blob/master/CRMEB_system.md
CVE ID: CVE-2020-21400 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-10T15:44:32.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute arbitrary code via the id variable in the modify function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gaozhifeng/PHPMyWind/issues/11
CVE ID: CVE-2020-21405 State: PUBLISHED Published: 2022-07-20T18:45:22 Last Updated: 2024-08-04T14:30:33.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in H96 Smart TV Box H96 Pro Plus allows attackers to corrupt files via calls to the saveDeepColorAttr service.unk Additional Analyst Notes: - CVE Program Container: References: - https://github.com/helloworldxp/TVBoxBugs/blob/master/H96_Pro_Plus_SmartTV_Vulnerability
CVE ID: CVE-2020-21406 State: PUBLISHED Published: 2022-07-20T18:46:56 Last Updated: 2024-08-04T14:30:33.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in RK Smart TV Box MAX and V88 SmartTV box that allows attackers to cause a denial of service via the switchNextDisplayInterface service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/helloworldxp/TVBoxBugs/blob/master/RK_MAX_V88_SmartTV_Vulnerability
CVE ID: CVE-2020-21426 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-04T16:19:06.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in function C_IStream::read in PluginEXR.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/p/freeimage/bugs/300/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RUEK2JOVJBQZVNQIIZZO3JFMTVB4R5KS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.
.org/message/RUEK2JOVJBQZVNQIIZZO3JFMTVB4R5KS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGOMCRAANNCQYJYPPMGRQWKRZGIP6NME/
CVE ID: CVE-2020-21427 State: PUBLISHED Published: 2023-08-22T00:00:00.000Z Last Updated: 2025-05-05T12:50:14.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/p/freeimage/bugs/298/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RUEK2JOVJBQZVNQIIZZO3JFMTVB4R5KS/ - https://lists.fedoraproject.org/archives/list/package-announce%4
project.org/message/RUEK2JOVJBQZVNQIIZZO3JFMTVB4R5KS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGOMCRAANNCQYJYPPMGRQWKRZGIP6NME/ - https://lists.debian.org/debian-lts-announce/2023/11/msg00020.html - https://www.debian.org/security/2023/dsa-5579
CVE ID: CVE-2020-21428 State: PUBLISHED Published: 2023-08-22T00:00:00.000Z Last Updated: 2025-05-02T15:29:46.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in function LoadRGB in PluginDDS.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/p/freeimage/bugs/299/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RUEK2JOVJBQZVNQIIZZO3JFMTVB4R5KS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fed
g/message/RUEK2JOVJBQZVNQIIZZO3JFMTVB4R5KS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGOMCRAANNCQYJYPPMGRQWKRZGIP6NME/ - https://lists.debian.org/debian-lts-announce/2023/11/msg00020.html - https://www.debian.org/security/2023/dsa-5579
CVE ID: CVE-2020-21431 State: PUBLISHED Published: 2021-10-04T20:20:14 Last Updated: 2024-08-04T14:30:31.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: HongCMS v3.0 contains an arbitrary file read and write vulnerability in the component /admin/index.php/template/edit. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Neeke/HongCMS/issues/14
CVE ID: CVE-2020-21434 State: PUBLISHED Published: 2021-10-04T20:20:15 Last Updated: 2024-08-04T14:30:32.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: Maccms 10 contains a cross-site scripting (XSS) vulnerability in the Editing function under the Member module. This vulnerability is exploited via a crafted payload in the nickname text field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ksharp12138/maccms_userinfo_xss/blob/master/maccms_xss.md
CVE ID: CVE-2020-21452 State: PUBLISHED Published: 2021-04-29T16:21:18 Last Updated: 2024-08-04T14:30:32.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in uniview ISC2500-S. This is an upload vulnerability where an attacker can upload malicious code via /Interface/DevManage/EC.php?cmd=upload Additional Analyst Notes: - CVE Program Container: References: - https://github.com/qq1654985095/tyq