Details:
 

OS Command Injection ( CWE-78 ) --CVE-2020-5635


CVSS v3CVSS: 3.0 / AV: A / AC: L / PR: N / UI: N / S: U / C: H / I: H / A: HBase value: 8.8


CVSS v2AV: A / AC: L / Au: N / C: P / I: P / A: PBase value: 5.8

Details:

Plone is a Zope Technology Server-based open source content management system (CMS). In Plone versions prior to 5.2.3, there is a security vulnerability which allows XXE attacks to be carried out without permission through features protected by…

Details:

Seo Panel 4.8.0 allows reflected XSS via the seo/seopanel/login.php?sec=forgot email parameter.

Date:
 

Saturday, January 2, 2021

Details:
Umbraco is a Content Management System (CMS) open source written by Umbraco, Denmark, in C#. There is a path traversal flaw in Umbraco CMS 8.9.1 and earlier versions, allowing arbitrary files to be written outside the home directory of the site and…

Details:
AIRDROPX BORN is an AIRDROPX BORN API token service which can be used for Bitcoin and other network currencies to be transferred and exchanged. Version 2019-05-29 of AIRDROPX BORN and older versions have a security flaw.
The flaw derives from a constructor's…

Details:
The XCloner Backup and Restore plugin previous to 4.2.13 for WordPress discovered a problem. This provided the ability for authenticated attackers to alter arbitrary files, like PHP files. Doing so would allow remote code execution to be performed…

Details:
 

Rosemount X-STREAM is an Emerson-provided gas analyzer. An inappropriate authentication flaw is used in Rosemount X-STREAM ( CWE-287 ). 

Via a specially designed URL, logs and backup data can be accessed by a remote third party and confidential…