CVE-2018-16980

dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/imagetools/index.jsp fieldName and inode parameters...

CVE-2019-16980

In FusionPBX up to v4.5.7, the file app\callbroadcast\callbroadcastedit.php uses an unsanitized "id" variable coming from the URL in an unparameterized SQL query, leading to SQL injection...

CVE-2020-16980

An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. To exploit the vulnerability, an attacker would first need code execution on a victim...

CVE-2020-16980 Windows iSCSI Target Service Elevation of Privilege Vulnerability

...

CVE-2020-16980

CVE-2020-16980 is an elevation-of-privilege vulnerability in the Windows iSCSI Target Service caused by improper handling of file operations. An attacker who can achieve code execution on a victim system could run a crafted application to gain elevated privileges. The entry notes the vulnerabilit...

KB4580358: Windows 8.1 and Windows Server 2012 R2 October 2020 Security Update

The remote Windows host is missing security update 4580358 or cumulative update 4580347. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Group Policy improperly checks access. An attacker who successfully exploited this vulnerability...

CVE-2017-16980

This CVE entry is rejected/not used per the Initial Description.

CVE-2019-16980

In FusionPBX up to v4.5.7, the file app\callbroadcast\callbroadcastedit.php uses an unsanitized "id" variable coming from the URL in an unparameterized SQL query, leading to SQL injection...

CVE-2019-16980

In FusionPBX up to v4.5.7, the file app\callbroadcast\callbroadcastedit.php uses an unsanitized "id" variable coming from the URL in an unparameterized SQL query, leading to SQL injection...

CVE-2018-16980

CVE-2018-16980 affects dotCMS v5.0.1 and is a cross-site scripting vulnerability in the /html/portlet/ext/contentlet/image_tools/index.jsp page, specifically in the fieldName and inode parameters. The connected documents corroborate XSS details (CNVD-2019-07129, NVD entry). The exact exploitabili...