rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-18305 
Extreme Networks EXOS before v.22.7 and before v.30.2 was discovered to contain an issue in its Web GUI which fails to restrict URL access, allowing attackers to access sensitive information or escalate privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-05-13T15:43:43.670Z
CVE-2020-18324 
Cross Site Scripting (XSS) vulnerability exists in Subrion CMS 4.2.1 via the q parameter in the Kickstart template.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-04T14:15:54.000Z
CVE-2020-18325 
Multilple Cross Site Scripting (XSS) vulnerability exists in Intelliants Subrion CMS v4.2.1 in the Configuration panel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-04T14:15:57.000Z
CVE-2020-18326 
Cross Site Request Forgery (CSRF) vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members administrator function, which could let a remote unauthenticated malicious user send an authorised request to victim and successfully create an arbitrary administrator user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-04T14:15:37.000Z
CVE-2020-18327 
Cross Site Scripting (XSS) vulnerability exists in Alfresco Alfresco Community Edition v5.2.0 via the action parameter in the alfresco/s/admin/admin-nodebrowser API. Fixed in v6.2
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-04T14:15:17.000Z
CVE-2020-18329 
An issue was discovered in Rehau devices that use a pCOWeb card BIOS v6.27, BOOT v5.00, web version v2.2, allows attackers to gain full unauthenticated access to the configuration and service interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-01-25T00:00:00.000Z
CVE-2020-18330 
An issue was discovered in the default configuration of ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN running the firmware version W2000EN-01(hardware platform Gpn2.4P21-C_WIFI-V0.05), allows attackers to gain access to the configuration interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-01-25T00:00:00.000Z
CVE-2020-18331 
Directory traversal vulnerability in ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN running the firmware version W2000EN-01(hardware platform Gpn2.4P21-C_WIFI-V0.05), via the getpage parameter to /cgi-bin/webproc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-01-25T00:00:00.000Z
CVE-2020-18336 
Cross Site Scripting (XSS) vulnerability found in Typora v.0.9.65 allows a remote attacker to obtain sensitive information via the PDF file exporting function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-10-10T00:00:00.000Z
CVE-2020-18378 
A NULL pointer dereference was discovered in SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-as.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-18382 
Heap-buffer-overflow in /src/wasm/wasm-binary.cpp in wasm::WasmBinaryBuilder::visitBlock(wasm::Block*) in Binaryen 1.38.26. A crafted wasm input can cause a segmentation fault, leading to denial-of-service, as demonstrated by wasm-opt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-18392 
Stack overflow vulnerability in parse_array Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-28T20:37:40.000Z
CVE-2020-18395 
A NULL-pointer deference issue was discovered in GNU_gama::set() in ellipsoid.h in Gama 2.04 which can lead to a denial of service (DOS) via segment faults caused by crafted inputs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-28T20:36:53.000Z
CVE-2020-18404 
An issue was discovered in espcms version P8.18101601. There is a cross site scripting (XSS) vulnerability that allows arbitrary code to be executed via the title parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-27T00:00:00.000Z
CVE-2020-18406 
An issue was discovered in cmseasy v7.0.0 that allows user credentials to be sent in clear text due to no encryption of form data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-27T00:00:00.000Z
CVE-2020-18409 
Cross Site Request Forgery (CSRF) vulnerability was discovered in CatfishCMS 4.8.63 that would allow attackers to obtain administrator permissions via /index.php/admin/index/modifymanage.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-27T00:00:00.000Z
CVE-2020-18410 
A stored cross site scripting (XSS) vulnerability in /index.php?admin-master-article-edit of Chaoji CMS v2.18 that allows attackers to obtain administrator privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-27T00:00:00.000Z
CVE-2020-18413 
Stored cross site scripting (XSS) vulnerability in /index.php?admin-master-navmenu-add of Chaoji CMS v2.18 that allows attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-27T00:00:00.000Z
CVE-2020-18414 
Stored cross site scripting (XSS) vulnerability in Chaoji CMS v2.18 that allows attackers to execute arbitrary code via /index.php?admin-master-webset.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-27T00:00:00.000Z
CVE-2020-18416 
An cross site request forgery (CSRF) vulnerability discovered in Jymusic v2.0.0.,that allows attackers to execute arbitrary code via /admin.php?s=/addons/config.html&id=6 to modify payment information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-27T00:00:00.000Z
CVE-2020-18418 
A Cross site request forgery (CSRF) vulnerability was discovered in FeiFeiCMS v4.1.190209, which allows attackers to create administrator accounts via /index.php?s=Admin-Admin-Insert.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-27T00:00:00.000Z
CVE-2020-18428 
tinyexr commit 0.9.5 was discovered to contain an array index error in the tinyexr::SaveEXR component, which can lead to a denial of service (DOS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-26T21:36:01.000Z
CVE-2020-18430 
tinyexr 0.9.5 was discovered to contain an array index error in the tinyexr::DecodeEXRImage component, which can lead to a denial of service (DOS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-26T21:36:03.000Z
CVE-2020-18432 
File Upload vulnerability in SEMCMS PHP 3.7 allows remote attackers to upload arbitrary files and gain escalated privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-06-30T00:00:00.000Z
CVE-2020-18438 
Directory traversal vulnerability in qinggan phpok 5.1, allows attackers to disclose sensitive information, via the title parameter to admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-02T17:44:02.000Z
CVE-2020-18439 
An issue was discoverered in in function edit_save_f in framework/admin/tpl_control.php in qinggan phpok 5.1, allows attackers to write arbitrary files or get a shell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-02T17:44:57.000Z
CVE-2020-18440 
Buffer overflow vulnerability in framework/init.php in qinggan phpok 5.1, allows attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-02T17:44:59.000Z
CVE-2020-18442 
Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_cat_file".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-18T14:25:51.000Z
CVE-2020-18445 
Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the upurl function in Page.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-12T16:36:01.000Z
CVE-2020-18446 
Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the param parameter in the insertContent function in ContentModel.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-12T16:42:04.000Z
CVE-2020-18449 
Cross Site Scripting (XSS) vulnerability exists in UKCMS v1.1.10 via data in the index function in Single.php
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-12T17:15:55.000Z
CVE-2020-18451 
Cross Site Scripting (XSS) vulnerability exists in DamiCMS v6.0.6 via the title parameter in the doadd function in LabelAction.class.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-12T17:26:21.000Z
CVE-2020-18454 
Cross Site Request Forgery (CSRF) vulnerability in bycms v1.3 via admin.php/systems/index/module_id/70/group_id/1.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-12T17:39:08.000Z
CVE-2020-18455 
Cross Site Scripting (XSS) vulnerability exists in bycms v3.0.4 via the title parameter in the edit function in Document.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-12T17:42:13.000Z
CVE-2020-18456 
Cross Site Scripting (XSS) vulnerability exists in PbootCMS v1.3.7 via the title parameter in the mod function in SingleController.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-12T17:48:08.000Z
CVE-2020-18457 
Cross Site Request Forgery (CSRF) vulnerability exists in bycms v1.3.0 that can add an admin account via admin.php/ucenter/add.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-12T17:54:10.000Z
CVE-2020-18458 
Cross Site Request Forgery (CSRF) vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/Admin/doadd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-12T18:02:46.000Z
CVE-2020-18460 
Cross Site Request Forgery (CSRF) vulnerability exists in 711cms v1.0.7 that can add an admin account via admin.php?c=Admin&m=content.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-12T18:13:19.000Z
CVE-2020-18462 
File Upload vulnerabilty in AikCms v2.0.0 in poster_edit.php because the background file management office does not verify the uploaded file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-12T18:30:19.000Z
CVE-2020-18463 
Cross Site Request Forgery (CSRF) vulnerability exists in v2.0.0 in video_list.php, which can let a malicious user delete a video message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-12T18:36:05.000Z
CVE-2020-18464 
Cross Site Request Forgery (CSRF) vulnerability in AikCms 2.0.0 in video_list.php, which can let a malicious user delete movie information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-12T18:39:53.000Z
CVE-2020-18467 
Cross Site Scripting (XSS) vulnerabilty exists in BigTree-CMS 4.4.3 in the tag name field found in the Tags page under the General menu via a crafted website name by doing an authenticated POST HTTP request to admin/tags/create.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-26T17:28:41.000Z
CVE-2020-18468 
Cross Site Scripting (XSS) vulnerability exists in qdPM 9.1 in the Heading field found in the Login Page page under the General menu via a crafted website name by doing an authenticated POST HTTP request to /qdPM_9.1/index.php/configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-26T17:28:43.000Z
CVE-2020-18469 
Stored cross-site scripting (XSS) vulnerability in the Copyright Text field found in the Application page under the Configuration menu in Rukovoditel 2.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted website name by doing an authenticated POST HTTP request to /rukovoditel_2.4.1/index.php?module=configuration/save&redirect_to=configuration/application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-26T17:28:45.000Z
CVE-2020-18470 
Stored cross-site scripting (XSS) vulnerability in the Name of application field found in the General Configuration page in Rukovoditel 2.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted website name by doing an authenticated POST HTTP request to rukovoditel_2.4.1/install/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-26T17:28:46.000Z
CVE-2020-18475 
Cross Site Scripting (XSS) vulnerabilty exists in Hucart CMS 5.7.4 is via the mes_title field. The first user inserts a malicious script into the header field of the outbox and sends it to other users. When other users open the email, the malicious code will be executed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-26T17:28:49.000Z
CVE-2020-18476 
SQL Injection vulnerability in Hucart CMS 5.7.4 via the basic information field found in the avatar usd_image field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-26T17:28:51.000Z
CVE-2020-18477 
SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message con_content field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-26T17:28:52.000Z
CVE-2020-18494 
Buffer Overflow vulnerability in function H5S_close in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-18544 
SQL Injection in WMS v1.0 allows remote attackers to execute arbitrary code via the "username" parameter in the component "chkuser.php".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-12T19:39:41.000Z
CVE-2020-18568 
The D-Link DSR-250 (3.14) DSR-1000N (2.11B201) UPnP service contains a command injection vulnerability, which can cause remote command execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-02T13:22:19.000Z
CVE-2020-18646 
Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/public/index.php".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-22T14:25:41.000Z
CVE-2020-18647 
Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/nonecms/vendor".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-22T14:25:44.000Z
CVE-2020-18648 
Cross Site Request Forgery (CSRF) in JuQingCMS v1.0 allows remote attackers to gain local privileges via the component "JuQingCMS_v1.0/admin/index.php?c=administrator&a=add".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-22T14:25:45.000Z
CVE-2020-18651 
Buffer Overflow vulnerability in function ID3_Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted audio file with ID3V2 frame.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-18652 
Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-18654 
Cross Site Scripting (XSS) in Wuzhi CMS v4.1.0 allows remote attackers to execute arbitrary code via the "Title" parameter in the component "/coreframe/app/guestbook/myissue.php".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-22T15:08:35.000Z
CVE-2020-18657 
Cross Site Scripting (XSS) vulnerability in GetSimpleCMS <= 3.3.15 in admin/changedata.php via the redirect_url parameter and the headers_sent function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-23T18:43:59.000Z
CVE-2020-18658 
Cross Site Scriptiong (XSS) vulnerability in GetSimpleCMS <=3.3.15 via the timezone parameter to settings.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-23T18:54:41.000Z
CVE-2020-18659 
Cross Site Scripting vulnerability in GetSimpleCMS <=3.3.15 via the (1) sitename, (2) username, and (3) email parameters to /admin/setup.php
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-23T18:59:43.000Z
CVE-2020-18660 
GetSimpleCMS <=3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-23T20:19:51.000Z
CVE-2020-18661 
Cross Site Scripting (XSS) vulnerability in gnuboard5 <=v5.3.2.8 via the url parameter to bbs/login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-24T14:54:19.000Z
CVE-2020-18662 
SQL Injection vulnerability in gnuboard5 <=v5.3.2.8 via the table_prefix parameter in install_db.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-24T15:01:38.000Z
CVE-2020-18663 
Cross Site Scripting (XSS) vulnerability in gnuboard5 <=v5.3.2.8 via the act parameter in bbs/move_update.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-24T15:03:57.000Z
CVE-2020-18664 
Cross Site Scripting (XSS) vulnerability in WebPort <=1.19.1via the connection name parameter in type-conn.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-24T15:29:13.000Z
CVE-2020-18665 
Directory Traversal vulnerability in WebPort <=1.19.1 in tags of system settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-24T15:40:11.000Z
CVE-2020-18667 
SQL Injection vulnerability in WebPort <=1.19.1 via the new connection, parameter name in type-conn.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-24T16:07:47.000Z
CVE-2020-18668 
Cross Site Scripting (XSS) vulnerabililty in WebPort <=1.19.1 via the description parameter to script/listcalls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-24T17:35:02.000Z
CVE-2020-18670 
Cross Site Scripting (XSS) vulneraibility in Roundcube mail .4.4 via database host and user in /installer/test.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-24T18:07:54.000Z
CVE-2020-18671 
Cross Site Scripting (XSS) vulnerability in Roundcube Mail <=1.4.4 via smtp config in /installer/test.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-24T18:14:12.000Z
CVE-2020-18683 
Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of undefined fields mishandling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-30T01:20:15.000Z
CVE-2020-18684 
Floodlight through 1.2 has an integer overflow in checkFlow in StaticFlowEntryPusherResource.java via priority or port number.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-30T01:17:21.000Z
CVE-2020-18685 
Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of unchecked prerequisites related to TCP or UDP ports, or group or table IDs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-30T01:18:43.000Z
CVE-2020-18693 
Cross Site Scripting (XSS) in MineWebCMS v1.7.0 allows remote attackers to execute arbitrary code by injecting malicious code into the 'Title' field of the component '/admin/news'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-06T18:02:18.000Z
CVE-2020-18694 
Cross Site Request Forgery (CSRF) in IgnitedCMS v1.0 allows remote attackers to obtain sensitive information and gain privilege via the component "/admin/profile/save_profile".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-06T18:02:34.000Z
CVE-2020-18698 
Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in the component 'app/api/cms/user.py'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-16T17:54:46.000Z
CVE-2020-18699 
Cross Site Scripting (XSS) in Lin-CMS-Flask v0.1.1 allows remote attackers to execute arbitrary code by entering scripts in the the 'Username' parameter of the in component 'app/api/cms/user.py'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-16T17:55:06.000Z
CVE-2020-18701 
Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive information and/or gain privileges due to the application not invalidating a user's authentication token upon logout, which allows for replaying packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-16T17:55:27.000Z
CVE-2020-18702 
Cross Site Scripting (XSS) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Username' parameter in the component 'quokka/admin/actions.py'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-16T17:55:35.000Z
CVE-2020-18703 
XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/utils/atom.py'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-16T17:55:55.000Z
CVE-2020-18704 
Unrestricted Upload of File with Dangerous Type in Django-Widgy v0.8.4 allows remote attackers to execute arbitrary code via the 'image' widget in the component 'Change Widgy Page'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-16T17:56:05.000Z
CVE-2020-18705 
XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-16T17:56:14.000Z
CVE-2020-18713 
SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in customerAction.php
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-04T23:01:17.000Z
CVE-2020-18714 
SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordModel.php's getdata function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-04T23:06:51.000Z