General-Purpose System Vulnerabilities
Vulnerabilities related to traditional IT systems, servers, and desktop applications.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2020-7700 | All versions of phpjs are vulnerable to Prototype Pollution via parse_str. | Critical (9.8) | 2020-08-14 | General Purpose |
| CVE-2020-17462 | CMS Made Simple 2.2.14 allows Authenticated Arbitrary File Upload because the File Manager does not block .ptar files, … | High (7.8) | 2020-08-14 | General Purpose |
| CVE-2020-12648 | A cross-site scripting (XSS) vulnerability in TinyMCE 5.2.1 and earlier allows remote attackers to inject arbitrary web… | Medium (6.1) | 2020-08-14 | General Purpose |
| CVE-2019-7410 | There is stored cross site scripting (XSS) in Galileo CMS v0.042. Remote authenticated users could inject arbitrary web… | Medium (6.1) | 2020-08-14 | General Purpose |
| CVE-2019-6112 | A Cross-site scripting (XSS) vulnerability in /inc/class-search.php in the Sell Media plugin v2.4.1 for WordPress allow… | Medium (6.1) | 2020-08-14 | General Purpose |