rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-21602 
libde265 v1.0.4 contains a heap buffer overflow in the put_weighted_bipred_16_fallback function, which can be exploited via a crafted a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-16T00:00:00.000Z
CVE-2020-21603 
libde265 v1.0.4 contains a heap buffer overflow in the put_qpel_0_0_fallback_16 function, which can be exploited via a crafted a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-16T00:00:00.000Z
CVE-2020-21604 
libde265 v1.0.4 contains a heap buffer overflow fault in the _mm_loadl_epi64 function, which can be exploited via a crafted a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-16T00:00:00.000Z
CVE-2020-21605 
libde265 v1.0.4 contains a segmentation fault in the apply_sao_internal function, which can be exploited via a crafted a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-16T00:00:00.000Z
CVE-2020-21606 
libde265 v1.0.4 contains a heap buffer overflow fault in the put_epel_16_fallback function, which can be exploited via a crafted a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-16T00:00:00.000Z
CVE-2020-21627 
Ruijie RG-UAC commit 9071227 was discovered to contain a vulnerability in the component /current_action.php?action=reboot, which allows attackers to cause a denial of service (DoS) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-16T18:06:35.000Z
CVE-2020-21639 
Ruijie RG-UAC 6000-E50 commit 9071227 was discovered to contain a cross-site scripting (XSS) vulnerability via the rule_name parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-16T18:06:33.000Z
CVE-2020-21641 
Out-of-Band XML External Entity (OOB-XXE) vulnerability in Zoho ManageEngine Analytics Plus before 4.3.5 allows remote attackers to read arbitrary files, enumerate folders and scan internal ports via crafted XML license file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-15T19:10:38.000Z
CVE-2020-21642 
Directory Traversal vulnerability ZDBQAREFSUBDIR parameter in /zropusermgmt API in Zoho ManageEngine Analytics Plus before 4350 allows remote attackers to run arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-15T19:10:38.000Z
CVE-2020-21643 
Cross Site Scripting (XSS) vulnerability in HongCMS 3.0 allows attackers to run arbitrary code via the callback parameter to /ajax/myshop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-28T00:00:00.000Z
CVE-2020-21648 
WDJA CMS v1.5.2 contains an arbitrary file deletion vulnerability in the component admin/cache/manage.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-06T21:33:56.000Z
CVE-2020-21649 
Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sql() method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-06T21:33:57.000Z
CVE-2020-21650 
Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the add() method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-06T21:33:58.000Z
CVE-2020-21651 
Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\point.php, which can be exploited via the add() method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-06T21:33:59.000Z
CVE-2020-21652 
Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the addqq() method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-06T21:33:59.000Z
CVE-2020-21653 
Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sj() method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-06T21:34:00.000Z
CVE-2020-21654 
emlog v6.0 contains a vulnerability in the component admin\template.php, which allows attackers to getshell via a crafted Zip file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-06T21:34:01.000Z
CVE-2020-21656 
XYHCMS v3.6 contains a stored cross-site scripting (XSS) vulnerability in the component xyhai.php?s=/Link/index.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-06T21:34:02.000Z
CVE-2020-21658 
A Cross-Site Request Forgery (CSRF) in WDJA CMS v1.5.2 allows attackers to arbitrarily add administrator accounts via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-06T21:34:03.000Z
CVE-2020-21662 
SQL injection vulnerability in yunyecms 2.0.2 allows remote attackers to run arbitrary SQL commands via XFF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-07-31T00:00:00.000Z
CVE-2020-21665 
In fastadmin V1.0.0.20191212_beta, when a user with administrator rights has logged in, a malicious parameter can be passed for SQL injection in URL /admin/ajax/weigh.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-17T14:58:46.000Z
CVE-2020-21667 
In fastadmin-tp6 v1.0, in the file app/admin/controller/Ajax.php the 'table' parameter passed is not filtered so a malicious parameter can be passed for SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-13T15:03:46.000Z
CVE-2020-21674 
Heap-based buffer overflow in archive_string_append_from_wcs() (archive_string.c) in libarchive-3.4.1dev allows remote attackers to cause a denial of service (out-of-bounds write in heap memory resulting into a crash) via a crafted archive file. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-15T14:59:02.000Z
CVE-2020-21675 
A stack-based buffer overflow in the genptk_text component in genptk.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ptk format.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-10T20:19:45.000Z
CVE-2020-21676 
A stack-based buffer overflow in the genpstrx_text() component in genpstricks.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pstricks format.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-10T00:00:00.000Z
CVE-2020-21677 
A heap-based buffer overflow in the sixel_encoder_output_without_macro function in encoder.c of Libsixel 1.8.4 allows attackers to cause a denial of service (DOS) via converting a crafted PNG file into Sixel format.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-10T20:19:47.000Z
CVE-2020-21678 
A global buffer overflow in the genmp_writefontmacro_latex component in genmp.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into mp format.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-10T20:19:48.000Z
CVE-2020-21679 
Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-21680 
A stack-based buffer overflow in the put_arrow() component in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pict2e format.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-10T20:19:42.000Z
CVE-2020-21681 
A global buffer overflow in the set_color component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ge format.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-10T20:19:42.000Z
CVE-2020-21682 
A global buffer overflow in the set_fill component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ge format.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-10T20:19:41.000Z
CVE-2020-21683 
A global buffer overflow in the shade_or_tint_name_after_declare_color in genpstricks.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pstricks format.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-10T20:19:40.000Z
CVE-2020-21684 
A global buffer overflow in the put_font in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pict2e format.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-10T20:19:40.000Z
CVE-2020-21685 
Buffer Overflow vulnerability in hash_findi function in hashtbl.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-21686 
A stack-use-after-scope issue discovered in expand_mmac_params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-21687 
Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-21688 
A heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-10T20:19:37.000Z
CVE-2020-21697 
A heap-use-after-free in the mpeg_mux_write_packet function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service (DOS) via a crafted avi file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-10T20:19:34.000Z
CVE-2020-21699 
The web server Tengine 2.2.2 developed in the Nginx version from 0.5.6 thru 1.13.2 is vulnerable to an integer overflow vulnerability in the nginx range filter module, resulting in the leakage of potentially sensitive information triggered by specially crafted requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-21710 
A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-21722 
Buffer Overflow vulnerability in oggvideotools 0.9.1 allows remote attackers to run arbitrary code via opening of crafted ogg file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-21723 
A Segmentation Fault issue discovered StreamSerializer::extractStreams function in streamSerializer.cpp in oggvideotools 0.9.1 allows remote attackers to cause a denial of service (crash) via opening of crafted ogg file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-21724 
Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run arbitrary code via opening of crafted ogg file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-21725 
OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the pid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-07T21:28:02.000Z
CVE-2020-21726 
OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the cid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-07T21:28:03.000Z
CVE-2020-21729 
JEECMS x1.1 contains a stored cross-site scripting (XSS) vulnerability in the component of /member-vipcenter.htm, which allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-07T21:28:04.000Z
CVE-2020-21731 
Gazie 7.29 is affected by: Cross Site Scripting (XSS) via http://192.168.100.7/gazie/modules/config/admin_utente.php?user_name=amministratore&Update. An attacker can inject JavaScript code, and the webapplication stores the injected code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-14T11:45:40.000Z
CVE-2020-21732 
Rukovoditel Project Management app 2.6 is affected by: Cross Site Scripting (XSS). An attacker can add JavaScript code to the filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-14T11:46:47.000Z
CVE-2020-21733 
Sagemcom F@ST3686 v1.0 HUN 3.97.0 has XSS via RgDiagnostics.asp, RgDdns.asp, RgFirewallEL.asp, RgVpnL2tpPptp.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-14T11:50:29.000Z
CVE-2020-21783 
In IBOS 4.5.4 the email function has a cross site scripting (XSS) vulnerability in emailbody[content] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-24T15:19:29.000Z
CVE-2020-21784 
phpwcms 1.9.13 is vulnerable to Code Injection via /phpwcms/setup/setup.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-24T15:29:13.000Z
CVE-2020-21785 
In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-24T15:24:56.000Z
CVE-2020-21786 
In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronController.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-24T15:22:58.000Z
CVE-2020-21787 
CRMEB 3.1.0+ is vulnerable to File Upload Getshell via /crmeb/crmeb/services/UploadService.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-24T14:51:50.000Z
CVE-2020-21788 
In CRMEB 3.1.0+ strict domain name filtering leads to SSRF(Server-Side Request Forgery). The vulnerable code is in file /crmeb/app/admin/controller/store/CopyTaobao.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-24T14:48:17.000Z
CVE-2020-21806 
SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php..
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-27T16:20:16.000Z
CVE-2020-21808 
SQL Injection vulnerability in NukeViet CMS 4.0.10 - 4.3.07 via:the topicsid parameter in modules/news/admin/addtotopics.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-29T15:04:59.000Z
CVE-2020-21809 
SQL Injection vulnerability in NukeViet CMS module Shops 4.0.29 and 4.3 via the (1) listid parameter in detail.php and the (2) group_price or groupid parameters in search_result.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-29T15:36:52.000Z
CVE-2020-21813 
A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T17:58:46.000Z
CVE-2020-21814 
A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlwescape ../../programs/escape.c:97.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T18:13:18.000Z
CVE-2020-21815 
A null pointer deference issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114, which causes a denial of service (application crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T18:45:34.000Z
CVE-2020-21816 
A heab based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:46.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T18:41:30.000Z
CVE-2020-21817 
A null pointer dereference issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:29. which causes a denial of service (application crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T18:47:24.000Z
CVE-2020-21818 
A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:48.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T18:50:01.000Z
CVE-2020-21819 
A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641via htmlescape ../../programs/escape.c:51.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T18:55:50.000Z
CVE-2020-21827 
A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2379.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T19:46:16.000Z
CVE-2020-21830 
A heap based buffer overflow vulneraibility exists in GNU LibreDWG 0.10 via bit_calc_CRC ../../src/bits.c:2213.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T20:09:58.000Z
CVE-2020-21831 
A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_handles ../../src/decode.c:2637.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T21:08:33.000Z
CVE-2020-21832 
A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2417.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T20:20:55.000Z
CVE-2020-21833 
A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_classes ../../src/decode.c:2440.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T20:23:18.000Z
CVE-2020-21834 
A null pointer deference issue exists in GNU LibreDWG 0.10 via get_bmp ../../programs/dwgbmp.c:164.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T20:25:09.000Z
CVE-2020-21835 
A null pointer deference issue exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2337.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T20:28:36.000Z
CVE-2020-21836 
A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_preview ../../src/decode.c:3175.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T20:33:07.000Z
CVE-2020-21838 
A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_appinfo ../../src/decode.c:2842.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T20:41:46.000Z
CVE-2020-21839 
An issue was discovered in GNU LibreDWG 0.10. Crafted input will lead to an memory leak in dwg_decode_eed ../../src/decode.c:3638.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T20:55:29.000Z
CVE-2020-21840 
A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_search_sentinel ../../src/bits.c:1985.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T20:58:09.000Z
CVE-2020-21841 
A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_B ../../src/bits.c:135.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T20:59:57.000Z
CVE-2020-21842 
A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_revhistory ../../src/decode.c:3051.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T21:01:32.000Z
CVE-2020-21843 
A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_RC ../../src/bits.c:318.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T21:03:29.000Z
CVE-2020-21844 
GNU LibreDWG 0.10 is affected by: memcpy-param-overlap. The impact is: execute arbitrary code (remote). The component is: read_2004_section_header ../../src/decode.c:2580.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T21:06:57.000Z
CVE-2020-21845 
Codoforum 4.8.3 allows HTML Injection in the 'admin dashboard Manage users Section.'
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-14T17:42:43.000Z
CVE-2020-21854 
Cross Site Scripting vulnerabiity exists in WDScanner 1.1 in the system management page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-28T17:50:54.000Z
CVE-2020-21861 
File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-07-06T00:00:00.000Z
CVE-2020-21862 
Directory traversal vulnerability in DuxCMS 2.1 allows attackers to delete arbitrary files via /admin/AdminBackup/del.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-07-06T00:00:00.000Z
CVE-2020-21865 
ThinkPHP50-CMS v1.0 contains a remote code execution (RCE) vulnerability in the component /public/?s=captcha.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-07T20:05:17.000Z
CVE-2020-21881 
Cross Site Request Forgery (CSRF) vulnerability in admin.php in DuxCMS 2.1 allows remote attackers to modtify application data via article/admin/content/add.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-07-31T00:00:00.000Z
CVE-2020-21883 
Unibox U-50 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a OS command injection vulnerability in /tools/ping, which can leads to complete device takeover.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-09T12:19:12.000Z