CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

attackerkb•added 2020/10/30 5:15 p.m.•85 views

CVE-2020-7373

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. ALSO NOTE: CVE-2020-7373 is a duplicate of CVE-2020-17496. CVE-2020-17496 is...

9.8CVSS8.9AI score0.45007EPSS

SaveExploits3References5

Positive Technologies•added 2020/10/30 12:00 a.m.•4 views

PT-2020-19579

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget tabbedcontainer tab panel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. ALSO NOTE: CVE-2020-7373 is a duplicate of CVE-2020-17496. CVE-2020-17496 ...

9.8CVSS0.45007EPSS

SaveExploits3References10

Positive Technologies•added 2020/08/12 12:00 a.m.•16 views

PT-2020-6319

Name of the Vulnerable Software and Affected Versions vBulletin versions 5.5.4 through 5.6.2 Description The issue allows remote command execution via crafted subWidgets data in an "ajax/render/widget tabbedcontainer tab panel" request. This is due to an incomplete fix for a previous issue. The...

10CVSS9.9AI score0.87366EPSS

SaveExploits1References16

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by