CVE-2020-17000 to CVE-2020-17999

44 CVEs with public proof-of-concept exploits.

• CVE-2020-170572 PoCsWindows Win32k Elevation of Privilege Vulnerability
• CVE-2020-170831 PoCMicrosoft Exchange Server Remote Code Execution Vulnerability
• CVE-2020-170861 PoCRaw Image Extension Remote Code Execution Vulnerability
• CVE-2020-170875 PoCsKEVWindows Kernel Local Elevation of Privilege Vulnerability
• CVE-2020-171033 PoCsWindows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
• CVE-2020-171321 PoCMicrosoft Exchange Remote Code Execution Vulnerability
• CVE-2020-171363 PoCsWindows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
• CVE-2020-171431 PoCMicrosoft Exchange Server Information Disclosure Vulnerability
• CVE-2020-171443 PoCsKEVMicrosoft Exchange Remote Code Execution Vulnerability
• CVE-2020-173541 PoCLilyPond before 2.24 allows attackers to bypass the -dsafe protection mechanism via output-def-lookup or output-def-scope, as demonstrated…
• CVE-2020-173611 PoCAn issue was discovered in ReadyTalk Avian 1.2.0. The vm::arrayCopy method defined in classpath-common.h returns silently when a negative…
• CVE-2020-173621 PoCsearch.php in the Nova Lite theme before 1.3.9 for WordPress allows Reflected XSS.
• CVE-2020-173722 PoCsSugarCRM before 10.1.0 (Q3 2020) allows XSS.
• CVE-2020-173732 PoCsSugarCRM before 10.1.0 (Q3 2020) allows SQL Injection.
• CVE-2020-173811 PoCAn issue was discovered in Ghisler Total Commander 9.51. Due to insufficient access restrictions in the default installation directory, an…
• CVE-2020-173826 PoCsThe MSI AmbientLink MsIo64 driver 1.0.0.8 has a Buffer Overflow (0x80102040, 0x80102044, 0x80102050,and 0x80102054).
• CVE-2020-174491 PoCPHP-Fusion 9.03 allows XSS via the error_log file.
• CVE-2020-174501 PoCPHP-Fusion 9.03 allows XSS on the preview page.
• CVE-2020-174512 PoCsflatCore before 1.5.7 allows XSS by an admin via the acp/acp.php?tn=pages&sub=edit&editpage=1 page_linkname, page_title, page_content, or…
• CVE-2020-174522 PoCsflatCore before 1.5.7 allows upload and execution of a .php file by an admin.
• CVE-2020-174534 PoCsWSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter.
• CVE-2020-174566 PoCsSEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi page.
• CVE-2020-174621 PoCCMS Made Simple 2.2.14 allows Authenticated Arbitrary File Upload because the File Manager does not block .ptar files, a related issue to…
• CVE-2020-174632 PoCsKEVFUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.
• CVE-2020-174661 PoCTurcom TRCwifiZone through 2020-08-10 allows authentication bypass by visiting manage/control.php and ignoring 302 Redirect responses.
• CVE-2020-174792 PoCsjpv (aka Json Pattern Validator) before 2.2.2 does not properly validate input, as demonstrated by a corrupted array.
• CVE-2020-174871 PoCradare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in r_x509_parse_algorithmidentifier in…
• CVE-2020-174964 PoCsKEVvBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an…
• CVE-2020-175053 PoCsArtica Web Proxy 4.30.000000 allows an authenticated remote attacker to inject commands via the service-cmds parameter in cyrus.php. These…
• CVE-2020-175065 PoCsArtica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through…
• CVE-2020-175187 PoCsApache Flink directory traversal attack: remote file writing through the REST API
• CVE-2020-1751920 PoCsKEVApache Flink directory traversal attack: reading remote files through the REST API
• CVE-2020-175232 PoCsApache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.
• CVE-2020-175263 PoCsIncorrect Session Validation in Apache Airflow Webserver versions prior to 1.10.14 with default config allows a malicious airflow user on…
• CVE-2020-175271 PoCApache Tomcat: Request header mix-up between HTTP/2 streams
• CVE-2020-1753023 PoCsKEVForced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache…
• CVE-2020-175311 PoCDeserialization flaw in EOL Tapestry 4.
• CVE-2020-175321 PoCApache ServiceComb Yaml remote deserialization vulnerability
• CVE-2020-175331 PoCApache Accumulo Improper Handling of Insufficient Permissions
• CVE-2020-175381 PoCA buffer overflow vulnerability in GetNumSameData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9.18 to v9.50 allows…
• CVE-2020-175411 PoCLibjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed jpeg…
• CVE-2020-177521 PoCInteger overflow vulnerability in payable function of a smart contract implementation for an Ethereum token, as demonstrated by the smart…
• CVE-2020-179011 PoCCross-site request forgery (CSRF) in PbootCMS 1.3.2 allows attackers to change the password of a user.
• CVE-2020-179521 PoCA remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code.