rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-19137 
Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component "autumn-cms/user/getAllUser/?page=1&limit=10".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-08T20:18:22.000Z
CVE-2020-19138 
Unrestricted Upload of File with Dangerous Type in DotCMS v5.2.3 and earlier allow remote attackers to execute arbitrary code via the component "/src/main/java/com/dotmarketing/filters/CMSFilter.java".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-08T20:18:23.000Z
CVE-2020-19142 
iCMS 7 attackers to execute arbitrary OS commands via shell metacharacters in the DB_PREFIX parameter to install/install.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-10T21:07:35.000Z
CVE-2020-19143 
Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the "TIFFVGetField" funtion in the component 'libtiff/tif_dir.c'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T14:25:44.000Z
CVE-2020-19144 
Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'in _TIFFmemcpy' funtion in the component 'tif_unix.c'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T14:25:45.000Z
CVE-2020-19146 
Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information via the 'TemplatePath' parameter in the component 'jfinal_cms/admin/folder/list'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-15T13:52:47.000Z
CVE-2020-19147 
Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive infromation via the 'getFolder()' function in the component '/modules/filemanager/FileManager.java'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-15T13:52:48.000Z
CVE-2020-19148 
Cross Site Scripting (XSS) in Jfinal CMS v4.7.1 and earlier allows remote attackers to execute arbitrary code via the 'Nickname' parameter in the component '/jfinal_cms/front/person/profile.html'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-15T13:52:49.000Z
CVE-2020-19150 
Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information or cause a denial of service via the 'FileManager.delete()' function in the component 'modules/filemanager/FileManagerController.java'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-15T13:52:49.000Z
CVE-2020-19151 
Command Injection in Jfinal CMS v4.7.1 and earlier allows remote attackers to execute arbitrary code by uploading a malicious HTML template file via the component 'jfinal_cms/admin/filemanager/list'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-15T13:52:51.000Z
CVE-2020-19154 
Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information via the 'FileManager.editFile()' function in the component 'modules/filemanager/FileManagerController.java'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-15T13:52:51.000Z
CVE-2020-19155 
Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information and/or execute arbitrary code via the 'FileManager.rename()' function in the component 'modules/filemanager/FileManagerController.java'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-15T13:52:52.000Z
CVE-2020-19156 
Cross Site Scripting (XSS) in Ari Adminer v1 allows remote attackers to execute arbitrary code via the 'Title' parameter of the 'Add New Connections' component when the 'save()' function is called.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-15T13:52:53.000Z
CVE-2020-19157 
Cross Site Scripting (CSS) in Wenku CMS v3.4 allows remote attackers to execute arbitrary code via the 'Intro' parameter for the component '/index.php?m=ucenter&a=index'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-15T13:52:54.000Z
CVE-2020-19158 
Cross Site Scripting (XSS) in S-CMS build 20191014 and earlier allows remote attackers to execute arbitrary code via the 'Site Title' parameter of the component '/data/admin/#/app/config/'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-15T13:52:55.000Z
CVE-2020-19159 
Cross Site Request Forgery (CSRF) in LaikeTui v3 allows remote attackers to execute arbitrary code via the component '/index.php?module=member&action=add'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-15T13:52:56.000Z
CVE-2020-19165 
PHPSHE 1.7 has SQL injection via the admin.php?mod=user&userlevel_id=1 userlevel_id[] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-12-11T19:02:01.000Z
CVE-2020-19185 
Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-19186 
Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-19187 
Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-19188 
Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-19189 
Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-19190 
Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2020-19199 
A Cross Site Request Forgery (CSRF) vulnerability exists in PHPOK 5.2.060 via admin.php?c=admin&f=save, which could let a remote malicious user execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-10T17:29:45.000Z
CVE-2020-19201 
A Stored Cross-Site Scripting (XSS) vulnerability was found in status_filter_reload.php, a page in the pfSense software WebGUI, on Netgate pfSense version 2.4.4-p2 and earlier. The page did not encode output from the filter reload process, and a stored XSS was possible via the descr (description) parameter on NAT rules.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-12T15:53:46.000Z
CVE-2020-19202 
An authenticated Stored XSS (Cross-site Scripting) exists in the "captive.cgi" Captive Portal via the "Title of Login Page" text box or "TITLE" parameter in IPFire 2.21 (x86_64) - Core Update 130. It allows an authenticated WebGUI user with privileges to execute Stored Cross-site Scripting in the Captive Portal page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-17T15:22:58.000Z
CVE-2020-19203 
An authenticated Cross-Site Scripting (XSS) vulnerability was found in widgets/widgets/wake_on_lan_widget.php, a component of the pfSense software WebGUI, on version 2.4.4-p2 and earlier. The widget did not encode the descr (description) parameter of wake-on-LAN entries in its output, leading to a possible stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-12T15:39:07.000Z
CVE-2020-19204 
An authenticated Stored Cross-Site Scriptiong (XSS) vulnerability exists in Lightning Wire Labs IPFire 2.21 (x86_64) - Core Update 130 in the "routing.cgi" Routing Table Entries via the "Remark" text box or "remark" parameter. It allows an authenticated WebGUI user to execute Stored Cross-site Scripting in the Routing Table Entries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-12T15:22:38.000Z
CVE-2020-19212 
SQL Injection vulnerability in admin/group_list.php in piwigo v2.9.5, via the group parameter to delete.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-06T13:55:25.000Z
CVE-2020-19213 
SQL Injection vulnerability in cat_move.php in piwigo v2.9.5, via the selection parameter to move_categories.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-06T13:55:31.000Z
CVE-2020-19215 
SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=user_perm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-06T13:55:41.000Z
CVE-2020-19216 
SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=group_perm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-06T13:55:51.000Z
CVE-2020-19217 
SQL Injection vulnerability in admin/batch_manager.php in piwigo v2.9.5, via the filter_category parameter to admin.php?page=batch_manager.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-06T13:55:59.000Z
CVE-2020-19228 
An issue was found in bludit v3.13.0, unsafe implementation of the backup plugin allows attackers to upload arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-11T12:00:01.000Z
CVE-2020-19229 
Jeesite 1.2.7 uses the apache shiro version 1.2.3 affected by CVE-2016-4437. Because of this version of the java deserialization vulnerability, an attacker could exploit the vulnerability to execute arbitrary commands via the rememberMe parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-05T15:37:39.000Z
CVE-2020-19248 
SQL Injection vulnerability in PbootCMS 1.4.1 in parsing if statements in templates, resulting in a malicious user's ability to contaminate template content by searching for page contamination URLs, thus triggering vulnerabilities when the program uses eval statements to parse templates.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-02-21T00:00:00.000Z
CVE-2020-19263 
A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily escalate user privileges to administrator via index.php?s=/user/ApiAdminUser/itemEdit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T17:44:39.000Z
CVE-2020-19264 
A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily add users via index.php?s=/user/ApiAdminUser/itemAdd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T17:44:40.000Z
CVE-2020-19265 
A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Basis/links component of Dswjcms 1.6.4 allows attackers to execute arbitrary web scripts or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T17:44:41.000Z
CVE-2020-19266 
A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Site/articleList component of Dswjcms 1.6.4 allows attackers to execute arbitrary web scripts or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T17:44:42.000Z
CVE-2020-19267 
An issue in index.php/Dswjcms/Basis/resources of Dswjcms 1.6.4 allows attackers to execute arbitrary code via uploading a crafted PHP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T17:44:43.000Z
CVE-2020-19268 
A cross-site request forgery (CSRF) in index.php/Dswjcms/User/tfAdd of Dswjcms 1.6.4 allows authenticated attackers to arbitrarily add administrator users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T17:44:43.000Z
CVE-2020-19274 
A Cross SIte Scripting (XSS) vulnerability exists in Dhcms 2017-09-18 in guestbook via the message board, which could let a remote malicious user execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-12T16:26:35.000Z
CVE-2020-19275 
An Information Disclosure vulnerability exists in dhcms 2017-09-18 when entering invalid characters after the normal interface, which causes an error that will leak the physical path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-12T17:13:59.000Z
CVE-2020-19277 
Cross Site Scripting vulnerability found in Phachon mm-wiki v.0.1.2 allows a remote attacker to execute arbitrary code via javascript code in the markdown editor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-04T00:00:00.000Z
CVE-2020-19278 
Cross Site Request Forgery vulnerability found in Phachon mm-wiki v.0.1.2 allows a remote attacker to execute arbitrary code via the system/user/save parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-04T00:00:00.000Z
CVE-2020-19279 
Directory Traversal vulnerability found in B3log Wide allows a an attacker to escalate privileges via symbolic links.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-04T00:00:00.000Z
CVE-2020-19280 
Jeesns 1.4.2 contains a cross-site request forgery (CSRF) which allows attackers to escalate privileges and perform sensitive program operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T22:10:31.000Z
CVE-2020-19281 
A stored cross-site scripting (XSS) vulnerability in the /manage/loginusername component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the username field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T22:10:32.000Z
CVE-2020-19282 
A reflected cross-site scripting (XSS) vulnerability in Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the system error message's text field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T22:10:34.000Z
CVE-2020-19283 
A reflected cross-site scripting (XSS) vulnerability in the /newVersion component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T22:10:35.000Z
CVE-2020-19284 
A stored cross-site scripting (XSS) vulnerability in the /group/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the group comments text field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T22:10:36.000Z
CVE-2020-19285 
A stored cross-site scripting (XSS) vulnerability in the /group/apply component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Name text field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T22:10:38.000Z
CVE-2020-19286 
A stored cross-site scripting (XSS) vulnerability in the /question/detail component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the source field of the editor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T22:10:38.000Z
CVE-2020-19287 
A stored cross-site scripting (XSS) vulnerability in the /group/post component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T22:10:39.000Z
CVE-2020-19288 
A stored cross-site scripting (XSS) vulnerability in the /localhost/u component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a private message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T22:10:40.000Z
CVE-2020-19289 
A stored cross-site scripting (XSS) vulnerability in the /member/picture/album component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the new album tab.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T22:10:41.000Z
CVE-2020-19290 
A stored cross-site scripting (XSS) vulnerability in the /weibo/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Weibo comment section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T22:10:41.000Z
CVE-2020-19291 
A stored cross-site scripting (XSS) vulnerability in the /weibo/publishdata component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a posted Weibo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T22:10:42.000Z
CVE-2020-19292 
A stored cross-site scripting (XSS) vulnerability in the /question/ask component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a posted question.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T22:10:43.000Z
CVE-2020-19293 
A stored cross-site scripting (XSS) vulnerability in the /article/add component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a posted article.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T22:10:43.000Z
CVE-2020-19294 
A stored cross-site scripting (XSS) vulnerability in the /article/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the article comments section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T22:10:46.000Z
CVE-2020-19295 
A reflected cross-site scripting (XSS) vulnerability in the /weibo/topic component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T22:10:45.000Z
CVE-2020-19301 
A vulnerability in the vae_admin_rule database table of vaeThink v1.0.1 allows attackers to execute arbitrary code via a crafted payload in the condition parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-03T21:24:48.000Z
CVE-2020-19302 
An arbitrary file upload vulnerability in the avatar upload function of vaeThink v1.0.1 allows attackers to open a webshell via changing uploaded file suffixes to ".php".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-03T21:24:49.000Z
CVE-2020-19303 
An arbitrary file upload vulnerability in /fileupload.php of hdcms 5.7 allows attackers to execute arbitrary code via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-03T21:24:50.000Z
CVE-2020-19304 
An issue in /admin/index.php?n=system&c=filept&a=doGetFileList of Metinfo v7.0.0 allows attackers to perform a directory traversal and access sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-03T21:24:51.000Z
CVE-2020-19305 
An issue in /app/system/column/admin/index.class.php of Metinfo v7.0.0 causes the indeximg parameter to be deleted when the column is deleted, allowing attackers to escalate privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-03T21:24:52.000Z
CVE-2020-19316 
OS Command injection vulnerability in function link in Filesystem.php in Laravel Framework before 5.8.17.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-20T19:36:41.000Z
CVE-2020-19318 
Buffer Overflow vulnerability in D-Link DIR-605L, hardware version AX, firmware version 1.17beta and below, allows authorized attackers execute arbitrary code via sending crafted data to the webserver service program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-09-11T00:00:00.000Z
CVE-2020-19319 
Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the FILECODE parameter on login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-09-11T00:00:00.000Z
CVE-2020-19320 
Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the curTime parameter on login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-09-11T00:00:00.000Z
CVE-2020-19323 
An issue was discovered in /bin/mini_upnpd on D-Link DIR-619L 2.06beta devices. There is a heap buffer overflow allowing remote attackers to restart router via the M-search request ST parameter. No authentication required
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-09-11T00:00:00.000Z
CVE-2020-19360 
Local file inclusion in FHEM 6.0 allows in fhem/FileLog_logWrapper file parameter can allow an attacker to include a file, which can lead to sensitive information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-20T00:41:45.000Z
CVE-2020-19361 
Reflected XSS in Medintux v2.16.000 CCAM.php by manipulating the mot1 parameter can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-20T00:42:27.000Z
CVE-2020-19362 
Reflected XSS in Vtiger CRM v7.2.0 in vtigercrm/index.php? through the view parameter can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-20T00:42:56.000Z
CVE-2020-19363 
Vtiger CRM v7.2.0 allows an attacker to display hidden files, list directories by using /libraries and /layout directories.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-20T00:43:54.000Z
CVE-2020-19364 
OpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious PHP scripts through /controller.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-20T00:44:32.000Z
CVE-2020-19417 
Emerson Smart Wireless Gateway 1420 4.6.59 allows non-privileged users (such as the default account 'maint') to perform administrative tasks by sending specially crafted HTTP requests to the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-10T17:15:39.000Z