Lucene search
+L

3456 matches found

NVD
NVD
added 2020/12/24 8:15 p.m.26 views

CVE-2020-29474

EGavilan Media EGM Address Book 1.0 contains a SQL injection vulnerability. An attacker can gain Admin Panel access using malicious SQL injection queries to perform remote arbitrary code execution...

9.8CVSS10AI score0.04064EPSS
SaveExploits1References2
Prion
Prion
added 2020/12/24 8:15 p.m.17 views

Sql injection

EGavilan Media EGM Address Book 1.0 contains a SQL injection vulnerability. An attacker can gain Admin Panel access using malicious SQL injection queries to perform remote arbitrary code execution...

7.5CVSS10AI score0.04064EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2020/12/24 7:36 p.m.78 views

CVE-2020-29474

CVE-2020-29474 affects EGavilan Media EGM Address Book 1.0. A SQL injection vulnerability allows an attacker to gain Admin Panel access and perform remote arbitrary code execution. Publicly available exploits (e.g., Exploit-DB) exist per references in the records.

9.8CVSS9.9AI score0.04064EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2020/12/24 12:00 a.m.15 views

Egavilan Media EGM Address Book SQL注入漏洞

Egavilan Media EGM Address Book is a platform for managing contact information address book organized by Egavilan Media in the United States. A SQL injection vulnerability exists in EGavilan Media EGM Address Book version 1.0, which can be exploited by an attacker to gain access to the admin pane...

9.8CVSS7.7AI score0.04064EPSS
SaveExploits1References3
CNVD
CNVD
added 2020/12/23 12:00 a.m.4 views

Command Execution Vulnerability in Pleasant Book PDF Reader

Yuet Book PDF Reader is a Shenzhen Ivy Technology Co., Ltd. developed a universal PDF reader, support for PDF, pictures, PSD, office documents, programming documents, such as tens of thousands of file formats, work and study a good helper. Yuet Book PDF Reader there is a command execution...

7.3AI score
SaveExploits0
OSV
OSV
added 2020/12/22 5:12 p.m.5 views

OPENSUSE-SU-2020:2317-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 78.6 new: MailExtensions: Added browser.windows.openDefaultBrowser bmo1664708 changed: Thunderbird now only shows quota exceeded indications on the main window bmo1671748 changed: MailExtensions: menus API enable...

8.8CVSS7.9AI score0.01876EPSS
SaveExploits0References10
OPENSUSE Linux
OPENSUSE Linux
added 2020/12/22 12:00 a.m.37 views

Security update for MozillaThunderbird (critical)

openSUSE Security Update: Security update for MozillaThunderbird Announcement ID: openSUSE-SU-2020:2317-1 Rating: critical References: 1180039 Cross-References: CVE-2020-16042 CVE-2020-26971 CVE-2020-26973 CVE-2020-26974 CVE-2020-26978 CVE-2020-35111 CVE-2020-35112 CVE-2020-35113 Affected Product...

8.8CVSS9.1AI score0.01876EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/12/22 12:00 a.m.9 views

Egavilanmedia ECM Address Book SQL Injection Vulnerability

Egavilanmedia ECM Address Book is a platform for organizing and identifying address books from Egavilanmedia, USA. An SQL injection vulnerability exists in EgavilanMedia ECM Address Book 1.0, which can be exploited to bypass the administrative login panel via SQLi, gain administrative access, and...

9.8CVSS8.2AI score0.01544EPSS
SaveExploits1References1
OSV
OSV
added 2020/12/21 7:07 p.m.7 views

SUSE-SU-2020:3900-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 78.6 new: MailExtensions: Added browser.windows.openDefaultBrowser bmo1664708 changed: Thunderbird now only shows quota exceeded indications on the main window bmo1671748 changed: MailExtensions: menus API enable...

8.8CVSS7.9AI score0.01876EPSS
SaveExploits0References10
OSV
OSV
added 2020/12/21 3:15 p.m.12 views

CVE-2020-35276

EgavilanMedia ECM Address Book 1.0 is affected by SQL injection. An attacker can bypass the Admin Login panel through SQLi and get Admin access and add or remove any user...

9.8CVSS7.3AI score0.01544EPSS
SaveExploits1References3
NVD
NVD
added 2020/12/21 3:15 p.m.23 views

CVE-2020-35276

EgavilanMedia ECM Address Book 1.0 is affected by SQL injection. An attacker can bypass the Admin Login panel through SQLi and get Admin access and add or remove any user...

9.8CVSS10AI score0.01544EPSS
SaveExploits1References1
Prion
Prion
added 2020/12/21 3:15 p.m.22 views

Sql injection

EgavilanMedia ECM Address Book 1.0 is affected by SQL injection. An attacker can bypass the Admin Login panel through SQLi and get Admin access and add or remove any user...

7.5CVSS9.9AI score0.01544EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2020/12/21 2:51 p.m.54 views

CVE-2020-35276

CVE-2020-35276 affects EgavilanMedia ECM Address Book 1.0 and is caused by an SQL injection that can bypass the Admin Login panel, enabling an attacker to gain Admin access and add or remove users. The connected records confirm the vulnerability exists and describe the impact as admin access via ...

9.8CVSS9.9AI score0.01544EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2020/12/21 2:51 p.m.29 views

CVE-2020-35276

EgavilanMedia ECM Address Book 1.0 is affected by SQL injection. An attacker can bypass the Admin Login panel through SQLi and get Admin access and add or remove any user...

10AI score0.01544EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2020/12/21 12:00 a.m.17 views

Egavilanmedia ECM Address Book SQL注入漏洞

Egavilanmedia ECM Address Book is a platform for organizing and identifying address books from Egavilanmedia, USA. An SQL injection vulnerability exists in EgavilanMedia ECM Address Book 1.0, which can be exploited to bypass the administrative login panel via SQLi, gain administrative access, and...

9.8CVSS7.4AI score0.01544EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2020/12/15 12:00 a.m.16 views

Apple macOS Resource Management Error Vulnerability

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that can be exploited by local attackers to escalate their privileges. The following products and versions are affected: Mac Pro 2013 and newer, MacBook Air 2013...

7.8CVSS6.9AI score0.0027EPSS
SaveExploits0References6
CNVD
CNVD
added 2020/12/10 12:00 a.m.3 views

SQL Injection Vulnerability in elib, the Book Lending Management System of Qixing Company (CNVD-2020-73421)

Qixing book lending system is a book lending management system, including the front and back office management system, the system uses ASP.NET language development. There is a SQL injection vulnerability in elib, which can be exploited by attackers to obtain sensitive information from the databas...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2020/12/09 12:00 a.m.4 views

SQL Injection Vulnerability in elib, the Book Lending Management System of Qixing Company (CNVD-2020-72444)

Qixing book lending system is a book lending management system, including the front and back office management system, the system uses ASP.NET language development. There is a SQL injection vulnerability in elib, which can be exploited by attackers to obtain sensitive information from the databas...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2020/12/09 12:00 a.m.4 views

SQL Injection Vulnerability in elib, the Book Lending Management System of Qixing Company (CNVD-2020-72445)

Qixing book lending system is a book lending management system, including the front and back office management system, the system uses ASP.NET language development. There is a SQL injection vulnerability in elib, which can be exploited by attackers to obtain sensitive information from the databas...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2020/12/09 12:00 a.m.5 views

SQL Injection Vulnerability in Qixing Company's Book Lending Management System elib

Qixing Attendance System is a system for book lending management, including front and backend management system, which is developed using ASP.NET language. There is a SQL injection vulnerability in elib, the book lending management system of Qixing Company, which can be exploited by attackers to...

7.7AI score
SaveExploits0
Rows per page
Query Builder