排序
CVE-2020-26248: PrestaShop Product Comments <4.2.0 - SQL Injection
漏洞标题 CVE-2020-26248: PrestaShop Product Comments <4.2.0 - SQL Injection 漏洞描述 PrestaShop Product Comments module before version 4.2.1 contains a SQL injection vulnerabili...
2020年12月6日 10:43CVE-2020-35951: WordPress Quiz and Survey Master <7.0.1 - Arbitrary File Deletion
漏洞标题 CVE-2020-35951: Wordpress Quiz and Survey Master <7.0.1 - Arbitrary File Deletion 漏洞描述 Wordpress Quiz and Survey Master <7.0.1 allows users to delete arbitrary f...
2020年12月6日 03:12CVE-2020-14883: Oracle Fusion Middleware WebLogic Server Administration Console – Remote Code Execution
漏洞标题 CVE-2020-14883: Oracle Fusion Middleware WebLogic Server Administration Console - Remote Code Execution 漏洞描述 The Oracle Fusion Middleware WebLogic Server admin console...
2020年12月6日 02:56CVE-2020-35598: Advanced Comment System 1.0 – Local File Inclusion
漏洞标题 CVE-2020-35598: Advanced Comment System 1.0 - Local File Inclusion 漏洞描述 ACS Advanced Comment System 1.0 is affected by local file inclusion via an advanced_component_s...
2020年12月6日 00:38CVE-2020-8209: Citrix XenMobile Server – Local File Inclusion
漏洞标题 CVE-2020-8209: Citrix XenMobile Server - Local File Inclusion 漏洞描述 Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile...
2020年12月5日 18:55CVE-2020-29583: ZyXel USG – Hardcoded Credentials
漏洞标题 CVE-2020-29583: ZyXel USG - Hardcoded Credentials 漏洞描述 A hardcoded credential vulnerability was identified in the 'zyfwp' user account in some Zyxel firewall...
2020年12月5日 13:14CVE-2020-24223: Mara CMS 7.5 – Cross-Site Scripting
漏洞标题 CVE-2020-24223: Mara CMS 7.5 - Cross-Site Scripting 漏洞描述 Mara CMS 7.5 allows reflected cross-site scripting in contact.php via the theme or pagetheme parameters. PoC代...
2020年12月5日 12:57CVE-2020-9425: rConfig <3.9.4 - Sensitive Information Disclosure
漏洞标题 CVE-2020-9425: rConfig <3.9.4 - Sensitive Information Disclosure 漏洞描述 rConfig prior to version 3.9.4 is susceptible to sensitive information disclosure. An unauthen...
2020年12月5日 06:22CVE-2020-22209: 74cms – ajax_common.php SQL Injection
漏洞标题 CVE-2020-22209: 74cms - ajax_common.php SQL Injection 漏洞描述 SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajax_common.php. PoC代码
2020年12月5日 00:53CVE-2020-11738: WordPress Duplicator 1.3.24 & 1.3.26 – Local File Inclusion
漏洞标题 CVE-2020-11738: WordPress Duplicator 1.3.24 & 1.3.26 - Local File Inclusion 漏洞描述 WordPress Duplicator 1.3.24 & 1.3.26 are vulnerable to local file inclusion vu...
2020年12月4日 17:46CVE-2020-9274: Pure-FTPd ≤ 1.0.49 – DoS via Uninitialized Pointer
漏洞标题 CVE-2020-9274: Pure-FTPd ≤ 1.0.49 - DoS via Uninitialized Pointer 漏洞描述 Pure-FTPd versions ≤ 1.0.49 (>= ~0.96) contain a vulnerability in the init_aliases() functi...
2020年12月3日 10:26CVE-2020-1943: Apache OFBiz <=16.11.07 - Cross-Site Scripting
漏洞标题 CVE-2020-1943: Apache OFBiz <=16.11.07 - Cross-Site Scripting 漏洞描述 Apache OFBiz 16.11.01 to 16.11.07 is vulnerable to cross-site scripting because data sent with co...
2020年12月2日 13:24CVE-2020-36708: WordPress Epsilon Framework Themes <=2.4.8 - Remote Code Execution
漏洞标题 CVE-2020-36708: WordPress Epsilon Framework Themes <=2.4.8 - Remote Code Execution 漏洞描述 WordPress themes including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activel...
2020年12月2日 07:23CVE-2020-5405: Spring Cloud Config – Local File Inclusion
漏洞标题 CVE-2020-5405: Spring Cloud Config - Local File Inclusion 漏洞描述 Spring Cloud Config versions 2.2.x prior to 2.2.2, 2.1.x prior to 2.1.7, and older unsupported versions ...
2020年12月2日 05:47CVE-2020-14092: WordPress PayPal Pro <1.1.65 - SQL Injection
漏洞标题 CVE-2020-14092: WordPress PayPal Pro <1.1.65 - SQL Injection 漏洞描述 WordPress PayPal Pro plugin before 1.1.65 is susceptible to SQL injection via the 'query'...
2020年12月1日 20:16CVE-2020-27866: NETGEAR – Authentication Bypass
漏洞标题 CVE-2020-27866: NETGEAR - Authentication Bypass 漏洞描述 NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and...
2020年12月1日 19:15
