Vulnerabilities (CVE)

Total 413906 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-19467 1 Flowpaper 1 Pdf2json 2026-06-17 4.3 MEDIUM 5.5 MEDIUM
An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an Illegal Use After Free .
CVE-2020-19466 1 Flowpaper 1 Pdf2json 2026-06-17 4.3 MEDIUM 5.5 MEDIUM
An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 1 .
CVE-2020-19465 1 Flowpaper 1 Pdf2json 2026-06-17 4.3 MEDIUM 5.5 MEDIUM
An issue has been found in function ObjectStream::getObject in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4 .
CVE-2020-19464 1 Flowpaper 1 Pdf2json 2026-06-17 4.3 MEDIUM 5.5 MEDIUM
An issue has been found in function XRef::fetch in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a stack overflow .
CVE-2020-19463 1 Flowpaper 1 Pdf2json 2026-06-17 4.3 MEDIUM 5.5 MEDIUM
An issue has been found in function vfprintf in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a stack overflow.
CVE-2020-19455 1 Jdownloads 1 Jdownloads 2026-06-17 5.0 MEDIUM 7.5 HIGH
SQL injection exists in the jdownloads 3.2.63 component for Joomla! via components/com_jdownloads/helpers/categories.php, order function via the filter_order parameter.
CVE-2020-19451 1 Jdownloads 1 Jdownloads 2026-06-17 5.0 MEDIUM 7.5 HIGH
SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, updateLog function via the X-forwarded-for Header parameter.
CVE-2020-19450 1 Jdownloads 1 Jdownloads 2026-06-17 5.0 MEDIUM 7.5 HIGH
SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, getUserLimits function in the list parameter.
CVE-2020-19447 1 Jdownloads 1 Jdownloads 2026-06-17 5.0 MEDIUM 7.5 HIGH
SQL injection exists in the jdownloads 3.2.63 component for Joomla! com_jdownloads/models/send.php via the f_marked_files_id parameter.
CVE-2020-19419 1 Emerson 2 Smart Wireless Gateway 1420, Smart Wireless Gateway 1420 Firmware 2026-06-17 5.0 MEDIUM 7.5 HIGH
Incorrect Access Control in Emerson Smart Wireless Gateway 1420 4.6.59 allows remote attackers to obtain sensitive device information from the administrator console without authentication.
CVE-2020-19417 1 Emerson 2 Wireless 1420 Gateway, Wireless 1420 Gateway Firmware 2026-06-17 9.0 HIGH 8.8 HIGH
Emerson Smart Wireless Gateway 1420 4.6.59 allows non-privileged users (such as the default account 'maint') to perform administrative tasks by sending specially crafted HTTP requests to the application.
CVE-2020-19364 1 Open-emr 1 Openemr 2026-06-17 6.5 MEDIUM 8.8 HIGH
OpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious PHP scripts through /controller.php.
CVE-2020-19363 1 Vtiger 1 Vtiger Crm 2026-06-17 4.3 MEDIUM 6.5 MEDIUM
Vtiger CRM v7.2.0 allows an attacker to display hidden files, list directories by using /libraries and /layout directories.
CVE-2020-19362 1 Vtiger 1 Vtiger Crm 2026-06-17 4.3 MEDIUM 6.1 MEDIUM
Reflected XSS in Vtiger CRM v7.2.0 in vtigercrm/index.php? through the view parameter can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page.
CVE-2020-19361 1 Medintux 1 Medintux 2026-06-17 4.3 MEDIUM 6.1 MEDIUM
Reflected XSS in Medintux v2.16.000 CCAM.php by manipulating the mot1 parameter can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page.
CVE-2020-19360 1 Fhem 1 Fhem 2026-06-17 5.0 MEDIUM 7.5 HIGH
Local file inclusion in FHEM 6.0 allows in fhem/FileLog_logWrapper file parameter can allow an attacker to include a file, which can lead to sensitive information disclosure.
CVE-2020-19323 1 Dlink 2 Dir-619l, Dir-619l Firmware 2026-06-17 N/A 7.5 HIGH
An issue was discovered in /bin/mini_upnpd on D-Link DIR-619L 2.06beta devices. There is a heap buffer overflow allowing remote attackers to restart router via the M-search request ST parameter. No authentication required
CVE-2020-19320 1 Dlink 2 Dir-619l, Dir-619l Firmware 2026-06-17 N/A 9.8 CRITICAL
Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the curTime parameter on login.
CVE-2020-19319 1 Dlink 2 Dir-619l, Dir-619l Firmware 2026-06-17 N/A 9.8 CRITICAL
Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the FILECODE parameter on login.
CVE-2020-19318 1 Dlink 2 Dir-605l, Dir-605l Firmware 2026-06-17 N/A 8.8 HIGH
Buffer Overflow vulnerability in D-Link DIR-605L, hardware version AX, firmware version 1.17beta and below, allows authorized attackers execute arbitrary code via sending crafted data to the webserver service program.