General-Purpose System Vulnerabilities
Vulnerabilities related to traditional IT systems, servers, and desktop applications.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2020-25042 | An arbitrary file upload issue exists in Mara CMS 7.5. In order to exploit this, an attacker must have a valid authenti… | High (7.2) | 2020-09-03 | General Purpose |
| CVE-2020-24948 | The ao_ccss_import AJAX call in Autoptimize Wordpress Plugin 2.7.6 does not ensure that the file provided is a legitima… | High (7.2) | 2020-09-03 | General Purpose |
| CVE-2020-24863 | A memory corruption vulnerability was found in the kernel function kern_getfsstat in MidnightBSD before 1.2.7 and 1.3 t… | Medium (5.5) | 2020-09-03 | General Purpose |
| CVE-2020-24385 | In MidnightBSD before 1.2.6 and 1.3 before August 2020, and FreeBSD before 7, a NULL pointer dereference was found in t… | Medium (5.5) | 2020-09-03 | General Purpose |
| CVE-2020-13972 | Enghouse Web Chat 6.2.284.34 allows XSS. When one enters their own domain name in the WebServiceLocation parameter, the… | Medium (6.1) | 2020-09-03 | General Purpose |