CVE & Exploit Intelligence Database

CVE-2020-15999 9.6 CRITICAL KEV 5 PoCs Analysis EPSS 0.93

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CWE-120 Nov 03, 2020

CVE-2020-28042 5.3 MEDIUM 1 PoC Analysis EPSS 0.36

ServiceStack before 5.9.2 mishandles JWT signature verification unless an application has a custom ValidateToken function that establishes a valid minimum length for a signature.

CWE-347 Nov 02, 2020

CVE-2020-1147 7.8 HIGH KEV 3 PoCs Analysis EPSS 0.93

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.

Jul 14, 2020

CVE-2020-7656 6.1 MEDIUM 1 PoC Analysis EPSS 0.01

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.

CWE-79 May 19, 2020

CVE-2018-1285 9.8 CRITICAL 1 PoC Analysis EPSS 0.49

Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.

CWE-611 May 11, 2020

CVE-2020-11022 6.9 MEDIUM EXPLOITED 7 PoCs Analysis EPSS 0.10

In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CWE-79 Apr 29, 2020

CVE-2020-11023 6.9 MEDIUM KEV 7 PoCs Analysis EPSS 0.36

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CWE-79 Apr 29, 2020

CVE-2020-9472 6.5 MEDIUM 2 PoCs Analysis EPSS 0.02

Umbraco CMS 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Package functionality.

CWE-434 Mar 16, 2020

CVE-2020-9471 8.8 HIGH 1 PoC Analysis EPSS 0.03

Umbraco Cloud 8.5.3 allows an authenticated file upload (and consequently Remote Code Execution) via the Install Packages functionality.

CWE-434 Mar 16, 2020

CVE-2019-12562 6.1 MEDIUM 2 PoCs Analysis EPSS 0.39

Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin notification page. The exploit could be used to perfom any action with admin privileges such as managing content, adding users, uploading backdoors to the server, etc. Successful exploitation occurs when an admin user visits a notification page with stored cross-site scripting.

CWE-79 Sep 26, 2019

CVE-2018-18326 7.5 HIGH 1 PoC Analysis EPSS 0.77

DNN (aka DotNetNuke) 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expected entropy. NOTE: this issue exists because of an incomplete fix for CVE-2018-15812.

CWE-331 Jul 03, 2019

CVE-2018-18325 7.5 HIGH KEV 1 PoC Analysis NUCLEI EPSS 0.91

DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811.

CWE-326 Jul 03, 2019

CVE-2018-15812 7.5 HIGH 2 PoCs Analysis EPSS 0.78

DNN (aka DotNetNuke) 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy.

CWE-331 Jul 03, 2019

CVE-2018-15811 7.5 HIGH KEV 1 PoC Analysis NUCLEI EPSS 0.91

DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.

CWE-326 Jul 03, 2019

CVE-2019-11358 6.1 MEDIUM EXPLOITED 7 PoCs Analysis EPSS 0.02

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

CWE-1321 Apr 20, 2019

CVE-2019-9648 5.3 MEDIUM 2 PoCs Analysis EPSS 0.20

An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. A directory traversal vulnerability exists using the SIZE command along with a \..\..\ substring, allowing an attacker to enumerate file existence based on the returned information.

CWE-22 Mar 22, 2019

CVE-2019-8331 6.1 MEDIUM 3 PoCs Analysis EPSS 0.02

In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.

CWE-79 Feb 20, 2019

CVE-2016-10735 6.1 MEDIUM 1 PoC Analysis EPSS 0.06

In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.

CWE-79 Jan 09, 2019

CVE-2019-0568 7.5 HIGH 1 PoC Analysis EPSS 0.81

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0539, CVE-2019-0567.

CWE-787 Jan 08, 2019

CVE-2019-0567 7.5 HIGH 5 PoCs Analysis EPSS 0.90

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0539, CVE-2019-0568.

CWE-787 Jan 08, 2019