Total
413906 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2020-19281 | 1 Jeesns | 1 Jeesns | 2026-06-17 | 3.5 LOW | 5.4 MEDIUM |
| A stored cross-site scripting (XSS) vulnerability in the /manage/loginusername component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the username field. | |||||
| CVE-2020-19280 | 1 Jeesns | 1 Jeesns | 2026-06-17 | 6.8 MEDIUM | 8.8 HIGH |
| Jeesns 1.4.2 contains a cross-site request forgery (CSRF) which allows attackers to escalate privileges and perform sensitive program operations. | |||||
| CVE-2020-19279 | 1 Wide Project | 1 Wide | 2026-06-17 | N/A | 9.8 CRITICAL |
| Directory Traversal vulnerability found in B3log Wide allows a an attacker to escalate privileges via symbolic links. | |||||
| CVE-2020-19278 | 1 Mm-wiki Project | 1 Mm-wiki | 2026-06-17 | N/A | 8.8 HIGH |
| Cross Site Request Forgery vulnerability found in Phachon mm-wiki v.0.1.2 allows a remote attacker to execute arbitrary code via the system/user/save parameter. | |||||
| CVE-2020-19277 | 1 Mm-wiki Project | 1 Mm-wiki | 2026-06-17 | N/A | 5.4 MEDIUM |
| Cross Site Scripting vulnerability found in Phachon mm-wiki v.0.1.2 allows a remote attacker to execute arbitrary code via javascript code in the markdown editor. | |||||
| CVE-2020-19275 | 1 Dhcms Project | 1 Dhcms | 2026-06-17 | 5.0 MEDIUM | 5.3 MEDIUM |
| An Information Disclosure vulnerability exists in dhcms 2017-09-18 when entering invalid characters after the normal interface, which causes an error that will leak the physical path. | |||||
| CVE-2020-19274 | 1 Dhcms Project | 1 Dhcms | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| A Cross SIte Scripting (XSS) vulnerability exists in Dhcms 2017-09-18 in guestbook via the message board, which could let a remote malicious user execute arbitrary code. | |||||
| CVE-2020-19268 | 1 Dswjcms Project | 1 Dswjcms | 2026-06-17 | 3.5 LOW | 5.7 MEDIUM |
| A cross-site request forgery (CSRF) in index.php/Dswjcms/User/tfAdd of Dswjcms 1.6.4 allows authenticated attackers to arbitrarily add administrator users. | |||||
| CVE-2020-19267 | 1 Dswjcms Project | 1 Dswjcms | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| An issue in index.php/Dswjcms/Basis/resources of Dswjcms 1.6.4 allows attackers to execute arbitrary code via uploading a crafted PHP file. | |||||
| CVE-2020-19266 | 1 Dswjcms Project | 1 Dswjcms | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Site/articleList component of Dswjcms 1.6.4 allows attackers to execute arbitrary web scripts or HTML. | |||||
| CVE-2020-19265 | 1 Dswjcms Project | 1 Dswjcms | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| A stored cross-site scripting (XSS) vulnerability in the index.php/Dswjcms/Basis/links component of Dswjcms 1.6.4 allows attackers to execute arbitrary web scripts or HTML. | |||||
| CVE-2020-19264 | 1 Mipcms | 1 Mipcms | 2026-06-17 | 4.3 MEDIUM | 6.5 MEDIUM |
| A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily add users via index.php?s=/user/ApiAdminUser/itemAdd. | |||||
| CVE-2020-19263 | 1 Mipcms | 1 Mipcms | 2026-06-17 | 6.8 MEDIUM | 8.8 HIGH |
| A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily escalate user privileges to administrator via index.php?s=/user/ApiAdminUser/itemEdit. | |||||
| CVE-2020-19248 | 1 Pbootcms | 1 Pbootcms | 2026-06-17 | N/A | 5.1 MEDIUM |
| SQL Injection vulnerability in PbootCMS 1.4.1 in parsing if statements in templates, resulting in a malicious user's ability to contaminate template content by searching for page contamination URLs, thus triggering vulnerabilities when the program uses eval statements to parse templates. | |||||
| CVE-2020-19229 | 1 Jeesite | 1 Jeesite | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| Jeesite 1.2.7 uses the apache shiro version 1.2.3 affected by CVE-2016-4437. Because of this version of the java deserialization vulnerability, an attacker could exploit the vulnerability to execute arbitrary commands via the rememberMe parameter. | |||||
| CVE-2020-19217 | 1 Piwigo | 1 Piwigo | 2026-06-17 | 6.5 MEDIUM | 8.8 HIGH |
| SQL Injection vulnerability in admin/batch_manager.php in piwigo v2.9.5, via the filter_category parameter to admin.php?page=batch_manager. | |||||
| CVE-2020-19216 | 1 Piwigo | 1 Piwigo | 2026-06-17 | 6.5 MEDIUM | 8.8 HIGH |
| SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=group_perm. | |||||
| CVE-2020-19215 | 1 Piwigo | 1 Piwigo | 2026-06-17 | 6.5 MEDIUM | 8.8 HIGH |
| SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=user_perm. | |||||
| CVE-2020-19213 | 1 Piwigo | 1 Piwigo | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| SQL Injection vulnerability in cat_move.php in piwigo v2.9.5, via the selection parameter to move_categories. | |||||
| CVE-2020-19212 | 1 Piwigo | 1 Piwigo | 2026-06-17 | 4.0 MEDIUM | 4.9 MEDIUM |
| SQL Injection vulnerability in admin/group_list.php in piwigo v2.9.5, via the group parameter to delete. | |||||