rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-18716 
SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordAction.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-04T23:15:49.000Z
CVE-2020-18717 
SQL Injection in ZZZCMS zzzphp 1.7.1 allows remote attackers to execute arbitrary code due to a lack of parameter filtering in inc/zzz_template.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-04T23:25:45.000Z
CVE-2020-18723 
Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email recipient side while forwarding an email to perform potentially malicious activities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-03T17:25:14.000Z
CVE-2020-18724 
Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an attacker to executes code and perform a XSS attack while opening a contact list.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-03T17:27:42.000Z
CVE-2020-18730 
A segmentation violation in the Iec104_Deal_I function of IEC104 v1.0 allows attackers to cause a denial of service (DOS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-23T20:07:12.000Z
CVE-2020-18731 
A segmentation violation in the Iec104_Deal_FirmUpdate function of IEC104 v1.0 allows attackers to cause a denial of service (DOS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-23T20:07:13.000Z
CVE-2020-18734 
A stack buffer overflow in /ddsi/q_bitset.h of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-23T20:07:14.000Z
CVE-2020-18735 
A heap buffer overflow in /src/dds_stream.c of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-23T20:07:15.000Z
CVE-2020-18737 
An issue was discovered in Typora 0.9.67. There is an XSS vulnerability that causes Remote Code Execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-05T15:17:07.000Z
CVE-2020-18741 
Improper Authorization in ThinkSAAS v2.7 allows remote attackers to modify the description of any user's photo via the "photoid%5B%5D" and "photodesc%5B%5D" parameters in the component "index.php?app=photo."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-08T16:29:11.000Z
CVE-2020-18746 
SQL Injection in AiteCMS v1.0 allows remote attackers to execute arbitrary code via the component "aitecms/login/diy_list.php".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-18T14:32:23.000Z
CVE-2020-18748 
Cross Site Scripting (XSS) in Typora v0.9.65 allows attackers to execute arbitrary code via mathjax syntax due to a mathjax configuration error in the mathematical formula blocks. This is a different vulnerability from CVE-2020-18221.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-19T16:00:00.000Z
CVE-2020-18750 
Buffer overflow in pdf2json 0.69 allows local users to execute arbitrary code by converting a crafted PDF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-05T18:06:41.000Z
CVE-2020-18753 
An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to gain access to the system and escalate privileges via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-13T16:08:37.000Z
CVE-2020-18754 
An information disclosure vulnerability exists within Dut Computer Control Engineering Co.'s PLC MAC1100.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-13T16:08:37.000Z
CVE-2020-18756 
An arbitrary memory access vulnerability in the EPA protocol of Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to read the contents of any variable area.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-13T16:08:39.000Z
CVE-2020-18757 
An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to cause persistent denial of service (DOS) via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-13T16:08:39.000Z
CVE-2020-18758 
An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-13T16:08:40.000Z
CVE-2020-18759 
An information disclosure vulnerability exists in the EPA protocol of Dut Computer Control Engineering Co.'s PLC MAC1100.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-13T16:08:41.000Z
CVE-2020-18766 
A cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-26T15:34:25.000Z
CVE-2020-18768 
There exists one heap buffer overflow in _TIFFmemcpy in tif_unix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-18770 
An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-18771 
Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmn_int.cpp which can result in an information leak.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-23T00:00:00.000Z
CVE-2020-18773 
An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service (DOS) via a crafted tif file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-23T00:00:00.000Z
CVE-2020-18774 
A float point exception in the printLong function in tags_int.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service (DOS) via a crafted tif file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-23T00:00:00.000Z
CVE-2020-18775 
In Libav 12.3, there is a heap-based buffer over-read in vc1_decode_b_mb_intfi in vc1_block.c that allows an attacker to cause denial-of-service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-23T21:50:03.000Z
CVE-2020-18776 
In Libav 12.3, there is a segmentation fault in vc1_decode_b_mb_intfr in vc1_block.c that allows an attacker to cause denial-of-service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-23T21:50:04.000Z
CVE-2020-18778 
In Libav 12.3, there is a heap-based buffer over-read in vc1_decode_p_mb_intfi in vc1_block.c that allows an attacker to cause denial-of-service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-23T21:50:04.000Z
CVE-2020-18780 
A Use After Free vulnerability in function new_Token in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-18781 
Heap buffer overflow vulnerability in FilePOSIX::read in File.cpp in audiofile 0.3.6 may cause denial-of-service via a crafted wav file, this bug can be triggered by the executable sfconvert.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-18831 
Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-18839 
Buffer Overflow vulnerability in HtmlOutputDev::page in poppler 0.75.0 allows attackers to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-18875 
Incorrect Access Control in DotCMS versions before 5.1 allows remote attackers to gain privileges by injecting client configurations via vtl (velocity) files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-18T16:55:53.000Z
CVE-2020-18877 
SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in the component '/coreframe/app/order/admin/index.php'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-20T13:20:04.000Z
CVE-2020-18878 
Directory Traversal in Skycaiji v1.3 allows remote attackers to obtain sensitive information via the component 'index.php?m=admin&c=Tool&a=log&file=D%3A%5CphpStudy%5CWWW%5Cindex.php'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-20T13:20:19.000Z
CVE-2020-18879 
Unrestricted File Upload in Bludit v3.8.1 allows remote attackers to execute arbitrary code by uploading malicious files via the component 'bl-kereln/ajax/upload-logo.php'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-20T13:20:36.000Z
CVE-2020-18885 
Command Injection in PHPMyWind v5.6 allows remote attackers to execute arbitrary code via the "text color" field of the component '/admin/web_config.php'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-20T13:22:31.000Z
CVE-2020-18886 
Unrestricted File Upload in PHPMyWind v5.6 allows remote attackers to execute arbitrary code via the component 'admin/upload_file_do.php'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-20T13:22:46.000Z
CVE-2020-18888 
Arbitrary File Deletion vulnerability in puppyCMS v5.1 allows remote malicious attackers to delete the file/folder via /admin/functions.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-06T17:37:41.000Z
CVE-2020-18889 
Cross Site Request Forgery (CSRF) vulnerability in puppyCMS v5.1 that can change the admin's password via /admin/settings.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-06T16:54:24.000Z
CVE-2020-18890 
Rmote Code Execution (RCE) vulnerability in puppyCMS v5.1 due to insecure permissions, which could let a remote malicious user getshell via /admin/functions.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-06T17:04:20.000Z
CVE-2020-18897 
An use-after-free vulnerability in the libpff_item_tree_create_node function of libyal Libpff before 20180623 allows attackers to cause a denial of service (DOS) or execute arbitrary code via a crafted pff file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-19T21:20:35.000Z
CVE-2020-18898 
A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of service (DOS) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-19T21:20:36.000Z
CVE-2020-18899 
An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0.27 allows attackers to cause a denial of service (DOS) via a crafted input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-19T00:00:00.000Z
CVE-2020-18900 
A heap-based buffer overflow in the libexe_io_handle_read_coff_optional_header function of libyal libexe before 20181128. NOTE: the vendor has disputed this as described in libyal/libexe issue 1 on GitHub
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-19T21:20:38.000Z
CVE-2020-18912 
An issue found in Earcms Ear App v.20181124 allows a remote attacker to execute arbitrary code via the uload/index-uplog.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-29T00:00:00.000Z
CVE-2020-18913 
EARCLINK ESPCMS-P8 was discovered to contain a SQL injection vulnerability in the espcms_web/Search.php component via the attr_array parameter. This vulnerability allows attackers to access sensitive database information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-24T19:34:08.000Z
CVE-2020-18917 
The plus/search.php component in DedeCMS 5.7 SP2 allows remote attackers to execute arbitrary PHP code via the typename parameter because the contents of typename.inc are under an attacker's control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-24T19:34:10.000Z
CVE-2020-18964 
Cross Site Request Forgery (CSRF) Vulnerability in ForestBlog latest version via the website Management background, which could let a remote malicious gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T18:37:18.000Z
CVE-2020-18971 
Stack-based Buffer Overflow in PoDoFo v0.9.6 allows attackers to cause a denial of service via the component 'src/base/PdfDictionary.cpp:65'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-25T15:54:02.000Z
CVE-2020-18972 
Exposure of Sensitive Information to an Unauthorized Actor in PoDoFo v0.9.6 allows attackers to obtain sensitive information via 'IsNextToken' in the component 'src/base/PdfToenizer.cpp'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-25T15:54:03.000Z
CVE-2020-18974 
Buffer Overflow in Netwide Assembler (NASM) v2.15.xx allows attackers to cause a denial of service via 'crc64i' in the component 'nasmlib/crc64'. This issue is different than CVE-2019-7147.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-25T15:54:04.000Z
CVE-2020-18976 
Buffer Overflow in Tcpreplay v4.3.2 allows attackers to cause a Denial of Service via the 'do_checksum' function in 'checksum.c'. It can be triggered by sending a crafted pcap file to the 'tcpreplay-edit' binary. This issue is different than CVE-2019-8381.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-25T15:54:05.000Z
CVE-2020-18979 
Cross Siste Scripting (XSS) vulnerablity in Halo 0.4.3 via the X-forwarded-for Header parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-12T14:43:47.000Z
CVE-2020-18980 
Remote Code Executon vulnerability in Halo 0.4.3 via the remoteAddr and themeName parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-12T14:56:13.000Z
CVE-2020-18982 
Cross Sie Scripting (XSS) vulnerability in Halo 0.4.3 via CommentAuthorUrl.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-12T16:08:40.000Z
CVE-2020-18984 
A reflected cross-site scripting (XSS) vulnerability in the zimbraAdmin/public/secureRequest.jsp component of Zimbra Collaboration 8.8.12 allows unauthenticated attackers to execute arbitrary web scripts or HTML via a host header injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-15T22:17:28.000Z
CVE-2020-18985 
An issue in /domain/service/.ewell-known/caldav of Zimbra Collaboration 8.8.12 allows attackers to redirect users to any arbitrary website of their choosing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-15T22:17:29.000Z
CVE-2020-18998 
Cross Site Scripting (XSS) in Blog_mini v1.0 allows remote attackers to execute arbitrary code via the component '/admin/custom/blog-plugin/add'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-27T18:16:46.000Z
CVE-2020-18999 
Cross Site Scripting (XSS) in Blog_mini v1.0 allows remote attackers to execute arbitrary code via the component '/admin/submit-articles'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-27T18:16:47.000Z
CVE-2020-19000 
Cross Site Scripting (XSS) in Simiki v1.6.2.1 and prior allows remote attackers to execute arbitrary code via line 54 of the component 'simiki/blob/master/simiki/generators.py'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-27T18:16:48.000Z
CVE-2020-19001 
Command Injection in Simiki v1.6.2.1 and prior allows remote attackers to execute arbitrary system commands via line 64 of the component 'simiki/blob/master/simiki/config.py'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-27T18:16:48.000Z
CVE-2020-19002 
Cross Site Scripting (XSS) in Mezzanine v4.3.1 allows remote attackers to execute arbitrary code via the 'Description' field of the component 'admin/blog/blogpost/add/'. This issue is different than CVE-2018-16632.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-27T18:16:49.000Z
CVE-2020-19003 
An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-06T12:41:19.000Z
CVE-2020-19005 
zrlog v2.1.0 has a vulnerability with the permission check. If admin account is logged in, other unauthorized users can download the database backup file directly.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-25T21:46:12.000Z
CVE-2020-19007 
Halo blog 1.2.0 allows users to submit comments on blog posts via /api/content/posts/comments. The javascript code supplied by the attacker will then execute in the victim user's browser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-26T13:21:12.000Z
CVE-2020-19028 
*File Upload vulnerability found in Emlog EmlogCMS v.6.0.0 allows a remote attacker to gain access to sensitive information via the /admin/plugin.php function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-05T00:00:00.000Z
CVE-2020-19037 
Incorrect Access Control vulnearbility in Halo 0.4.3, which allows a malicious user to bypass encrption to view encrpted articles via cookies.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-12T16:39:44.000Z
CVE-2020-19038 
File Deletion vulnerability in Halo 0.4.3 via delBackup.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-12T16:45:48.000Z
CVE-2020-19042 
Cross Site Scripting (XSS) vulnerability exists in zzcms 2019 XSS via a modify action in user/adv.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-13T20:45:06.000Z
CVE-2020-19046 
Cross Site Scripting (XSS) in S-CMS v1.0 allows remote attackers to execute arbitrary code via the component '/admin/tpl.php?page='.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-31T13:15:37.000Z
CVE-2020-19047 
Cross Site Request Forgey (CSRF) in iWebShop v5.3 allows remote atatckers to execute arbitrary code via malicious POST request to the component '/index.php?controller=system&action=admin_edit_act'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-31T13:15:38.000Z
CVE-2020-19048 
Cross Site Scripting (XSS) in MyBB v1.8.20 allows remote attackers to inject arbitrary web script or HTML via the "Title" field found in the "Add New Forum" page by doing an authenticated POST HTTP request to '/Upload/admin/index.php?module=forum-management&action=add'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-31T13:16:34.000Z
CVE-2020-19049 
Cross Site Scripting (XSS) in MyBB v1.8.20 allows remote attackers to inject arbitrary web script or HTML via the "Description" field found in the "Add New Forum" page by doing an authenticated POST HTTP request to '/Upload/admin/index.php?module=forum-management&action=add'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-31T13:16:35.000Z
CVE-2020-19107 
SQL Injection vulnerability in Online Book Store v1.0 via the isbn parameter to edit_book.php, which could let a remote malicious user execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-05T21:12:17.000Z
CVE-2020-19108 
SQL Injection vulnerability in Online Book Store v1.0 via the pubid parameter to bookPerPub.php, which could let a remote malicious user execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-05T21:16:23.000Z
CVE-2020-19109 
SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_edit.php, which could let a remote malicious user execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-05T21:20:25.000Z
CVE-2020-19110 
SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to book.php parameter, which could let a remote malicious user execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-05T21:23:52.000Z
CVE-2020-19111 
Incorrect Access Control vulnerability in Online Book Store v1.0 via admin_verify.php, which could let a remote mailicious user bypass authentication and obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-05T21:38:17.000Z
CVE-2020-19112 
SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_delete.php, which could let a remote malicious user execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-05T21:43:07.000Z
CVE-2020-19113 
Arbitrary File Upload vulnerability in Online Book Store v1.0 in admin_add.php, which may lead to remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-05T21:55:25.000Z
CVE-2020-19114 
SQL Injection vulnerability in Online Book Store v1.0 via the publisher parameter to edit_book.php, which could let a remote malicious user execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-05T21:59:20.000Z
CVE-2020-19118 
Cross Site Scripting (XSS) vulnerabiity in YzmCMS 5.2 via the site_code parameter in admin/index/init.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-27T18:10:03.000Z
CVE-2020-19131 
Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the "invertImage()" function in the component "tiffcrop".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T14:06:26.000Z