93746 matches found
CVE-2020-36970
PMB 5.6 contains a local file disclosure vulnerability in getgif.php that allows attackers to read arbitrary system files by manipulating the 'chemin' parameter. Attackers can exploit the unsanitized file path input to access sensitive files like /etc/passwd by sending crafted requests to the...
DEBIAN-CVE-2020-36969
M/Monit 3.7.4 contains a privilege escalation vulnerability that allows authenticated users to modify user permissions by manipulating the admin parameter. Attackers can send a POST request to the /api/1/admin/users/update endpoint with a crafted payload to grant administrative access to a standa...
CVE-2020-36971
creationtimestamp| type| source ---|---|--- 2026-01-28 18:16:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdiuywoxhu2m...
CVE-2020-36963
creationtimestamp| type| source ---|---|--- 2026-01-28 18:09:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdiumappol26...
CVE-2020-36945
creationtimestamp| type| source ---|---|--- 2026-01-28 18:06:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdiuguqox22t...
CVE-2020-36967
creationtimestamp| type| source ---|---|--- 2026-01-28 18:03:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdiubye7lc2j...
CVE-2020-36964
creationtimestamp| type| source ---|---|--- 2026-01-28 18:01:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdiu5iwu4o2m...
CVE-2020-36962
creationtimestamp| type| source ---|---|--- 2026-01-28 17:56:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mditvjmmwn2j...
CVE-2020-36961
creationtimestamp| type| source ---|---|--- 2026-01-28 17:54:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mditrwunyb2n...
CVE-2020-36972 SmartBlog 2.0.1 - 'id_post' Blind SQL injection
SmartBlog 2.0.1 contains a blind SQL injection vulnerability in the 'idpost' parameter of the details controller that allows attackers to extract database information. Attackers can systematically test and retrieve database contents by injecting crafted SQL queries that compare...
CVE-2020-36969 M/Monit 3.7.4 - Privilege Escalation
M/Monit 3.7.4 contains a privilege escalation vulnerability that allows authenticated users to modify user permissions by manipulating the admin parameter. Attackers can send a POST request to the /api/1/admin/users/update endpoint with a crafted payload to grant administrative access to a standa...
CVE-2020-36968 M/Monit 3.7.4 - Password Disclosure
M/Monit 3.7.4 contains an authentication vulnerability that allows authenticated attackers to retrieve user password hashes through an administrative API endpoint. Attackers can send requests to the /api/1/admin/users/list and /api/1/admin/users/get endpoints to extract MD5 password hashes for al...
CVE-2020-36969
M/Monit 3.7.4 contains a privilege escalation vulnerability that allows authenticated users to modify user permissions by manipulating the admin parameter. Attackers can send a POST request to the /api/1/admin/users/update endpoint with a crafted payload to grant administrative access to a standa...
CVE-2020-36968
Removed by vendor...
CVE-2020-36963
Intelbras Router RF 301K firmware version 1.1.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to download router configuration files. Attackers can send a specific HTTP GET request to /cgi-bin/DownloadCfg/RouterCfm.cfg to retrieve sensitive router...
CVE-2020-36992
creationtimestamp| type| source ---|---|--- 2026-01-28 14:49:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdijgj7rht23...
CVE-2020-36990
creationtimestamp| type| source ---|---|--- 2026-01-28 14:44:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdij5ksm2r2t...
CVE-2020-36989
creationtimestamp| type| source ---|---|--- 2026-01-28 14:39:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdiiumf64j2t...