rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-23545 
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ReadXPM_W+0x0000000000000531.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-15T07:04:15.000Z
CVE-2020-23546 
IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted XBM file, related to a "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at FORMATS!ReadMosaic+0x0000000000000981.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-28T21:09:48.000Z
CVE-2020-23549 
IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted .cr2 file, related to a "Data from Faulting Address controls Branch Selection starting at FORMATS!GetPlugInInfo+0x00000000000047f6".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-28T21:09:49.000Z
CVE-2020-23550 
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e82.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-16T02:42:33.000Z
CVE-2020-23551 
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e30.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-16T02:43:45.000Z
CVE-2020-23552 
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e62.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-16T02:44:43.000Z
CVE-2020-23553 
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007d33.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-16T02:45:31.000Z
CVE-2020-23554 
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e20.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-16T02:46:22.000Z
CVE-2020-23555 
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e6e.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-16T02:47:29.000Z
CVE-2020-23556 
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e28.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-16T02:48:15.000Z
CVE-2020-23557 
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000000755d.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-16T02:49:12.000Z
CVE-2020-23558 
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007f4b.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-16T02:50:02.000Z
CVE-2020-23559 
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007d7f.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-16T02:50:45.000Z
CVE-2020-23560 
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000001bcab.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-16T02:51:48.000Z
CVE-2020-23561 
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000005722.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-17T23:10:10.000Z
CVE-2020-23562 
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000000aefe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-17T23:11:07.000Z
CVE-2020-23563 
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000002cba.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-17T23:11:45.000Z
CVE-2020-23564 
File Upload vulnerability in SEMCMS 3.9 allows remote attackers to run arbitrary code via SEMCMS_Upfile.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-05T00:00:00.000Z
CVE-2020-23565 
Irfanview v4.53 allows attackers to execute arbitrary code via a crafted JPEG 2000 file. Related to a "Data from Faulting Address controls Branch Selection starting at JPEG2000!ShowPlugInSaveOptions_W+0x0000000000032850".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-05T16:09:42.000Z
CVE-2020-23566 
Irfanview v4.53 was discovered to contain an infinity loop via JPEG2000!ShowPlugInSaveOptions_W+0x1ecd8.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-05T16:09:43.000Z
CVE-2020-23567 
Irfanview v4.53 allows attackers to to cause a denial of service (DoS) via a crafted JPEG 2000 file. Related to "Integer Divide By Zero starting at JPEG2000!ShowPlugInSaveOptions_W+0x00000000000082ea"
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-05T16:09:44.000Z
CVE-2020-23572 
BEESCMS v4.0 was discovered to contain an arbitrary file upload vulnerability via the component /admin/upload.php. This vulnerability allows attackers to execute arbitrary code via a crafted image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-08T20:46:52.000Z
CVE-2020-23574 
When uploading a file in Sysax Multi Server 6.90, an authenticated user can modify the filename="" parameter in the uploadfile_name1.htm form to a length of 368 or more bytes. This will create a buffer overflow condition, causing the application to crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-19T15:16:33.000Z
CVE-2020-23575 
A directory traversal vulnerability exists in Kyocera Printer d-COPIA253MF plus. Successful exploitation of this vulnerability could allow an attacker to retrieve or view arbitrary files from the affected server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-10T22:24:06.000Z
CVE-2020-23576 
Laborator Neon dashboard v3 is affected by stored Cross Site Scripting (XSS) via the chat tab.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-27T15:25:35.000Z
CVE-2020-23580 
Remote Code Execution vulnerability in PbootCMS 2.0.8 in the message board.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-08T18:43:03.000Z
CVE-2020-23582 
A vulnerability in the "/admin/wlmultipleap.asp" of optilink OP-XT71000N version: V2.2 could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to create Multiple WLAN BSSID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-21T00:00:00.000Z
CVE-2020-23583 
OPTILINK OP-XT71000N V2.2 is vulnerable to Remote Code Execution. The issue occurs when the attacker sends an arbitrary code on "/diag_ping_admin.asp" to "PingTest" interface that leads to COMMAND EXECUTION. An attacker can successfully trigger the COMMAND and can compromise full system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-23T00:00:00.000Z
CVE-2020-23584 
Unauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version: V2.2 occurs when the attacker passes arbitrary commands with IP-ADDRESS using " | " to execute commands on " /diag_tracert_admin.asp " in the "PingTest" parameter that leads to command execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-23T00:00:00.000Z
CVE-2020-23585 
A remote attacker can conduct a cross-site request forgery (CSRF) attack on OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028. The vulnerability is due to insufficient CSRF protections for the "mgm_config_file.asp" because of which attacker can create a crafted "csrf form" which sends " malicious xml data" to "/boaform/admin/formMgmConfigUpload". the exploit allows attacker to "gain full privileges" and to "fully compromise of router & network".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-23T00:00:00.000Z
CVE-2020-23586 
A vulnerability found in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to Add Network Traffic Control Type Rule.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-23T00:00:00.000Z
CVE-2020-23587 
A vulnerability found in the OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to men in the middle attack by adding New Routes in RoutingConfiguration on " /routing.asp ".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-23T00:00:00.000Z
CVE-2020-23588 
A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to "Enable or Disable Ports" and to "Change port number" through " /rmtacc.asp ".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-23T00:00:00.000Z
CVE-2020-23589 
A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to cause a Denial of Service by Rebooting the router through " /mgm_dev_reboot.asp."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-23T00:00:00.000Z
CVE-2020-23590 
A vulnerability in Optilink OP-XT71000N Hardware version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated remote attacker to conduct a cross-site request forgery (CSRF) attack to change the Password for "WLAN SSID" through "wlwpa.asp".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-23T00:00:00.000Z
CVE-2020-23591 
A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an attacker to upload arbitrary files through " /mgm_dev_upgrade.asp " which can "delete every file for Denial of Service (using 'rm -rf *.*' in the code), reverse connection (using '.asp' webshell), backdoor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-23T00:00:00.000Z
CVE-2020-23592 
A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to Reset ONU to Factory Default through ' /mgm_dev_reset.asp.' Resetting to default leads to Escalation of Privileges by logging-in with default credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-23T00:00:00.000Z
CVE-2020-23593 
A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2, Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross site request forgery (CSRF) attack to enable syslog mode through ' /mgm_log_cfg.asp.' The system starts to log events, 'Remote' mode or 'Both' mode on "Syslog -- Configuration page" logs events and sends to remote syslog server IP and Port.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-23T00:00:00.000Z
CVE-2020-23595 
Cross Site Request Forgery (CSRF) vulnerability in yzmcms version 5.6, allows remote attackers to escalate privileges and gain sensitive information sitemodel/add.html endpoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-11T00:00:00.000Z
CVE-2020-23617 
A cross site scripting (XSS) vulnerability in the error page of Totolink N200RE and N100RE Routers 2.0 allows attackers to execute arbitrary web scripts or HTML via SCRIPT element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-02T22:40:29.000Z
CVE-2020-23618 
A reflected cross site scripting (XSS) vulnerability in Xtend Voice Logger 1.0 allows attackers to execute arbitrary web scripts or HTML, via the path of the error page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-02T22:40:53.000Z
CVE-2020-23620 
The Java Remote Management Interface of all versions of Orlansoft ERP was discovered to contain a vulnerability due to insecure deserialization of user-supplied content, which can allow attackers to execute arbitrary code via a crafted serialized Java object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-02T22:40:58.000Z
CVE-2020-23621 
The Java Remote Management Interface of all versions of SVI MS Management System was discovered to contain a vulnerability due to insecure deserialization of user-supplied content, which can allow attackers to execute arbitrary code via a crafted serialized Java object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-02T22:41:14.000Z
CVE-2020-23622 
An issue in the UPnP protocol in 4thline cling 2.0.0 through 2.1.2 allows remote attackers to cause a denial of service via an unchecked CALLBACK parameter in the request header
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-15T19:10:38.000Z
CVE-2020-23630 
A blind SQL injection vulnerability exists in zzcms ver201910 based on time (cookie injection).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-11T14:18:22.000Z
CVE-2020-23631 
Cross-site request forgery (CSRF) in admin/global/manage.php in WDJA CMS 1.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via the tongji parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-11T19:16:40.000Z
CVE-2020-23639 
A command injection vulnerability exists in Moxa Inc VPort 461 Series Firmware Version 3.4 or lower that could allow a remote attacker to execute arbitrary commands in Moxa's VPort 461 Series Industrial Video Servers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-02T17:39:34.000Z
CVE-2020-23643 
XSS exists in JIZHICMS 1.7.1 via index.php/Wechat/checkWeixin?signature=1&echostr={XSS] to Home/c/WechatController.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-11T13:15:56.000Z
CVE-2020-23644 
XSS exists in JIZHICMS 1.7.1 via index.php/Error/index?msg={XSS] to Home/c/ErrorController.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-11T13:16:13.000Z
CVE-2020-23647 
Cross Site Scripting (XSS) vulnerability in BoxBilling 4.19, 4.19.1, 4.20, and 4.21 allows remote attackers to run arbitrary code via the message field on the submit new ticket form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-28T00:00:00.000Z
CVE-2020-23648 
Asus RT-N12E 2.0.0.39 is affected by an incorrect access control vulnerability. Through system.asp / start_apply.htm, an attacker can change the administrator password without any authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-19T00:00:00.000Z
CVE-2020-23653 
An insecure unserialize vulnerability was discovered in ThinkAdmin versions 4.x through 6.x in app/admin/controller/api/Update.php and app/wechat/controller/api/Push.php, which may lead to arbitrary remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-13T17:47:14.000Z
CVE-2020-23654 
NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) via the module "Shop."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-26T16:42:04.000Z
CVE-2020-23655 
NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Configuration."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-26T16:48:52.000Z
CVE-2020-23656 
NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Content."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-26T16:53:13.000Z
CVE-2020-23657 
NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Configuration."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-26T16:55:48.000Z
CVE-2020-23658 
PHP-Fusion 9.03.60 is affected by Cross Site Scripting (XSS) via infusions/member_poll_panel/poll_admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-26T17:11:38.000Z
CVE-2020-23659 
WebPort-v1.19.17121 is affected by Cross Site Scripting (XSS) on the "connections" feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-26T17:34:11.000Z
CVE-2020-23660 
webTareas v2.1 is affected by Cross Site Scripting (XSS) on "Search."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-26T17:26:12.000Z
CVE-2020-23679 
Buffer overflow vulnerability in Renleilei1992 Linux_Network_Project 1.0, allows attackers to execute arbitrary code, via the password field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-03T16:10:00.000Z
CVE-2020-23680 
An issue was discovered in function StartPage in text2pdf.c in pdfcorner text2pdf 1.1, allows attackers to cause denial of service or possibly other undisclosed impacts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-03T16:28:43.000Z
CVE-2020-23685 
SQL Injection vulnerability in 188Jianzhan v2.1.0, allows attackers to execute arbitrary code and gain escalated privileges, via the username parameter to login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-02T17:45:07.000Z
CVE-2020-23686 
Cross site request forgery (CSRF) vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password or other unspecified impacts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-02T17:45:09.000Z
CVE-2020-23689 
In YFCMF v2.3.1, there is a stored XSS vulnerability in the comments section of the news page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-14T13:57:31.000Z
CVE-2020-23691 
YFCMF v2.3.1 has a Remote Command Execution (RCE) vulnerability in the index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-14T14:02:01.000Z
CVE-2020-23697 
Cross Site Scripting vulnerabilty in Monstra CMS 3.0.4 via the page feature in admin/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-06T20:50:22.000Z
CVE-2020-23700 
Cross Site Scripting (XSS) vulnerability in LavaLite-CMS 5.8.0 via the Menu Links feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-07T18:19:05.000Z
CVE-2020-23702 
Cross Site Scripting (XSS) vulnerability in PHP-Fusion 9.03.60 via 'New Shout' in /infusions/shoutbox_panel/shoutbox_admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-07T18:56:55.000Z
CVE-2020-23705 
A global buffer overflow vulnerability in jfif_encode at jfif.c:701 of ffjpeg through 2020-06-22 allows attackers to cause a Denial of Service (DOS) via a crafted jpeg file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-15T21:55:05.000Z
CVE-2020-23706 
A heap-based buffer overflow vulnerability in the function ok_jpg_decode_block_subsequent_scan() ok_jpg.c:1102 of ok-file-formats through 2020-06-26 allows attackers to cause a Denial of Service (DOS) via a crafted jpeg file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-15T21:55:07.000Z
CVE-2020-23707 
A heap-based buffer overflow vulnerability in the function ok_jpg_decode_block_progressive() at ok_jpg.c:1054 of ok-file-formats through 2020-06-26 allows attackers to cause a Denial of Service (DOS) via a crafted jpeg file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-15T21:55:09.000Z
CVE-2020-23710 
Cross Site Scripting (XSS) vulneraiblity in LimeSurvey 4.2.5 on textbox via the Notifications & data feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-28T15:02:12.000Z
CVE-2020-23711 
SQL Injection vulnerability in NavigateCMS 2.9 via the URL encoded GET input category in navigate.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-28T16:07:26.000Z
CVE-2020-23715 
Directory Traversal vulnerability in Webport CMS 1.19.10.17121 via the file parameter to file/download.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-28T16:55:07.000Z
CVE-2020-23718 
Cross site scripting (XSS) vulnerability in xujinliang zibbs 1.0, allows attackers to execute arbitrary code via the route parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-02T17:45:12.000Z
CVE-2020-23719 
Cross site scripting (XSS) vulnerability in application/controllers/AdminController.php in xujinliang zibbs 1.0, allows attackers to execute arbitrary code via the bbsmeta parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-02T17:45:14.000Z
CVE-2020-23721 
An issue was discovered in FUEL CMS V1.4.7. An attacker can use a XSS payload and bypass a filter via /fuelCM/fuel/pages/edit/1?lang=english.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-10T13:36:35.000Z
CVE-2020-23722 
An issue was discovered in FUEL CMS 1.4.7. There is a escalation of privilege vulnerability to obtain super admin privilege via the "id" and "fuel_id" parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-10T13:36:54.000Z
CVE-2020-23726 
There is a local denial of service vulnerability in Wise Care 365 5.5.4, attackers can cause computer crash (BSOD).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-03T17:16:29.000Z
CVE-2020-23727 
There is a local denial of service vulnerability in the Antiy Zhijia Terminal Defense System 5.0.2.10121559 and an attacker can cause a computer crash (BSOD).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-03T17:43:17.000Z
CVE-2020-23735 
In Saibo Cyber Game Accelerator 3.7.9 there is a local privilege escalation vulnerability. Attackers can use the constructed program to increase user privileges
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-03T16:57:07.000Z
CVE-2020-23736 
There is a local denial of service vulnerability in DaDa accelerator 5.6.19.816,, attackers can use constructed programs to cause computer crashes (BSOD).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-03T18:47:15.000Z