Security Vulnerabilities - CVEs Published In 2020
B2368-22 V100R001C00;B2368-57 V100R001C00;B2368-66 V100R001C00 have a command injection vulnerability. An attacker with high privileges may exploit this vulnerability through some operations on the LAN. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject commands to the target device.
CVSS Score
6.8
EPSS Score
0.008
Published
2020-09-03
A SQL injection vulnerability in login in Sourcecodetester Daily Tracker System 1.0 allows unauthenticated user to execute authentication bypass with SQL injection via the email parameter.
CVSS Score
9.8
EPSS Score
0.026
Published
2020-09-03
The Admin CP in vBulletin 5.6.3 allows XSS via an Occupation Title or Description to User Profile Field Manager.
CVSS Score
4.8
EPSS Score
0.006
Published
2020-09-03
The Admin CP in vBulletin 5.6.3 allows XSS via an Announcement Title to Channel Manager.
CVSS Score
4.8
EPSS Score
0.006
Published
2020-09-03
The Admin CP in vBulletin 5.6.3 allows XSS via a Junior Member Title to User Title Manager.
CVSS Score
4.8
EPSS Score
0.006
Published
2020-09-03
The Admin CP in vBulletin 5.6.3 allows XSS via a Style Options Settings Title to Styles Manager.
CVSS Score
4.8
EPSS Score
0.006
Published
2020-09-03
The Admin CP in vBulletin 5.6.3 allows XSS via a Title of a Child Help Item in the Login/Logoff part of the User Manual.
CVSS Score
4.8
EPSS Score
0.007
Published
2020-09-03
The Admin CP in vBulletin 5.6.3 allows XSS via the admincp/search.php?do=dosearch URI.
CVSS Score
4.8
EPSS Score
0.006
Published
2020-09-03
The Admin CP in vBulletin 5.6.3 allows XSS via the Paid Subscription Email Notification field in the Options.
CVSS Score
4.8
EPSS Score
0.007
Published
2020-09-03
The Admin CP in vBulletin 5.6.3 allows XSS via a Rank Type to User Rank Manager.
CVSS Score
4.8
EPSS Score
0.006
Published
2020-09-03