CVE-2020-18432 (semcms)
File Upload vulnerability in SEMCMS PHP 3.7 allows remote attackers to upload arbitrary files and gain escalated privileges. ...
CVE-2015-1313 (teamcity)
JetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions via a crafted request because the required request data can be deduced by reading HTML and JavaScript files [...]
CVE-2020-18409 (catfishcms)
Cross Site Request Forgery (CSRF) vulnerability was discovered in CatfishCMS 4.8.63 that would allow attackers to obtain administrator permissions via /index.php/admin/index/modifymanage.html. ...
CVE-2020-18404 (espcms)
An issue was discovered in espcms version P8.18101601. There is a cross site scripting (XSS) vulnerability that allows arbitrary code to be executed via the title parameter. ...
CVE-2020-23064 (jquery)
Cross Site Scripting vulnerability in jQuery 2.2.0 through 3.x before 3.5.0 allows a remote attacker to execute arbitrary code via the <options> element. ...
CVE-2015-20109 (glibc)
end_pattern (called from internal_fnmatch) in the GNU C Library (aka glibc or libc6) before 2.22 might allow context-dependent attackers to cause a denial of service (application crash), as [...]
CVE-2019-25152 (abandoned_cart_lite_for_woocommerce, abandoned_cart_pro_for_woocommerce)
The Abandoned Cart Lite for WooCommerce and Abandoned Cart Pro for WooCommerce plugins for WordPress are vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to, and [...]
CVE-2020-20725 (taocms)
Cross Site Scripting vulnerability in taogogo taoCMS v.2.5 beta5.1 allows remote attacker to execute arbitrary code via the name field in admin.php. ...
CVE-2014-125106 (nanopb)
Nanopb before 0.3.1 allows size_t overflows in pb_dec_bytes and pb_dec_string. ...
CVE-2015-10118 (wp-copyprotect)
A vulnerability classified as problematic was found in cchetanonline WP-CopyProtect up to 3.0.0. This vulnerability affects the function CopyProtect_options_page of the file wp-copyprotect.php. [...]
