CVE Arsenal Intel

CVE-2020-5722

🔥 KEV Grandstream UCM6200 Series Web Database ⚡ nuclei

9.8

CRITICAL

EPSS

92.7%

2020 3 PoCs

The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. An attacker can use this vulnerability to execute shell commands as root on versions before 1.0.19.20 or inject HTML in password recovery emails in versions before 1.0.20.17.

nuclei -t CVE-2020-5722.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 🔍 GCVE ⚔ EDB

CVE-2020-2733

JD Edwards EnterpriseOne Tools Web Database ⚡ nuclei

9.8

CRITICAL

EPSS

88.9%

2020 2 PoCs

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne Tools. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

nuclei -t CVE-2020-2733.yaml ⎘

↗ PoC 1 ↗ PoC 2 🔍 GCVE ⚔ EDB

CVE-2020-2551

🔥 KEV WebLogic Server Database ⚡ nuclei

9.8

CRITICAL

EPSS

94.4%

2020 9 PoCs

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

nuclei -t CVE-2020-2551.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 ↗ PoC 5 ↗ PoC 6 +3 más 🔍 GCVE ⚔ EDB

CVE-2020-14882

🔥 KEV WebLogic Server Web Database ⚡ nuclei

9.8

CRITICAL

EPSS

94.5%

2020 38 PoCs

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

nuclei -t CVE-2020-14882.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 ↗ PoC 5 ↗ PoC 6 +32 más 🔍 GCVE ⚔ EDB

CVE-2020-0618

🔥 KEV Microsoft SQL Server Database ⚡ nuclei

9.8

CRITICAL

EPSS

94.3%

2020 6 PoCs

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.

nuclei -t CVE-2020-0618.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 ↗ PoC 5 ↗ PoC 6 🔍 GCVE ⚔ EDB

CVE-2020-17463

🔥 KEV Software Genérico Web Database ⚡ nuclei

9.8

CRITICAL

EPSS

17.5%

2020 2 PoCs

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.

nuclei -t CVE-2020-17463.yaml ⎘

↗ PoC 1 ↗ PoC 2 🔍 GCVE ⚔ EDB

CVE-2020-14750

🔥 KEV WebLogic Server Web Database ⚡ nuclei

9.8

CRITICAL

EPSS

94.4%

2020 3 PoCs

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

nuclei -t CVE-2020-14750.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 🔍 GCVE ⚔ EDB

CVE-2020-14864

🔥 KEV Business Intelligence Enterprise Edition Web Database ⚡ nuclei

7.5

HIGH

EPSS

94.0%

2020 2 PoCs

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Installation). Supported versions that are affected are 5.5.0.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts)

nuclei -t CVE-2020-14864.yaml ⎘

↗ PoC 1 ↗ PoC 2 🔍 GCVE ⚔ EDB

CVE-2020-14883

🔥 KEV WebLogic Server Web Database ⚡ nuclei

7.2

HIGH

EPSS

94.4%

2020 7 PoCs

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

nuclei -t CVE-2020-14883.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 ↗ PoC 5 ↗ PoC 6 +1 más 🔍 GCVE ⚔ EDB

CVE-2020-26248

productcomments Database ⚡ nuclei

6.8

MEDIUM

EPSS

77.4%

2020 CWE-89 1 PoC

In the PrestaShop module "productcomments" before version 4.2.1, an attacker can use a Blind SQL injection to retrieve data or stop the MySQL service. The problem is fixed in 4.2.1 of the module.

nuclei -t CVE-2020-26248.yaml ⎘

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2020-17506

Software Genérico Web Database ⚡ nuclei

N/A

UNKNOWN

EPSS

92.0%

2020 3 PoCs

Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQL injection of the apikey parameter in fw.login.php.

nuclei -t CVE-2020-17506.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 🔍 GCVE ⚔ EDB

CVE-2020-9314

Software Genérico Database ⚡ nuclei

N/A

UNKNOWN

EPSS

12.0%

2020 1 PoC

** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x allows image injection in the Administration console via the productNameSrc parameter to an admingui URI. This issue exists because of an incomplete fix for CVE-2012-0516. NOTE: a related support policy can be found in the www.oracle.com references attached to this CVE.

nuclei -t CVE-2020-9314.yaml ⎘

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2020-22165

Software Genérico Web Database ⚡ nuclei

N/A

UNKNOWN

EPSS

36.6%

2020 0 PoCs

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.

nuclei -t CVE-2020-22165.yaml ⎘

🔍 GCVE ⚔ EDB

CVE-2020-10548

Software Genérico Web Database ⚡ nuclei

N/A

UNKNOWN

EPSS

93.3%

2020 0 PoCs

rConfig 3.9.4 and previous versions has unauthenticated devices.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices.

nuclei -t CVE-2020-10548.yaml ⎘

🔍 GCVE ⚔ EDB

CVE-2020-36112

Software Genérico Web Database ⚡ nuclei

N/A

UNKNOWN

EPSS

89.5%

2020 1 PoC

CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pubid parameter in bookPerPub.php and in cart.php. A successful exploitation of this vulnerability will lead to an attacker dumping the entire database on which the web application is running.

nuclei -t CVE-2020-36112.yaml ⎘

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2020-35848

Software Genérico Web Database ⚡ nuclei

N/A

UNKNOWN

EPSS

92.4%

2020 2 PoCs

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function.

nuclei -t CVE-2020-35848.yaml ⎘

↗ PoC 1 ↗ PoC 2 🔍 GCVE ⚔ EDB

CVE-2020-5766

SRS Simple Hits Counter Plugin for WordPress Web Database Windows ⚡ nuclei

N/A

UNKNOWN

EPSS

39.1%

2020 1 PoC

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in SRS Simple Hits Counter Plugin for WordPress 1.0.3 and 1.0.4 allows a remote, unauthenticated attacker to determine the value of database fields.

nuclei -t CVE-2020-5766.yaml ⎘

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2020-35846

Software Genérico Web Database ⚡ nuclei

N/A

UNKNOWN

EPSS

93.9%

2020 4 PoCs

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function.

nuclei -t CVE-2020-35846.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 🔍 GCVE ⚔ EDB

CVE-2020-20300

Software Genérico Web Database ⚡ nuclei

N/A

UNKNOWN

EPSS

56.1%

2020 0 PoCs

SQL injection vulnerability in the wp_where function in WeiPHP 5.0.

nuclei -t CVE-2020-20300.yaml ⎘

🔍 GCVE ⚔ EDB

CVE-2020-10549

Software Genérico Web Database ⚡ nuclei

N/A

UNKNOWN

EPSS

93.0%

2020 0 PoCs

rConfig 3.9.4 and previous versions has unauthenticated snippets.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices.

nuclei -t CVE-2020-10549.yaml ⎘

🔍 GCVE ⚔ EDB