Show filters
267 Total Results
Displaying 151-160 of 267
Sort by:
Attacker Value
Unknown
CVE-2021-20826
Disclosure Date: December 24, 2021 (last updated February 23, 2025)
Unprotected transport of credentials vulnerability in IDEC PLCs (FC6A Series MICROSmart All-in-One CPU module v2.32 and earlier, FC6A Series MICROSmart Plus CPU module v1.91 and earlier, WindLDR v8.19.1 and earlier, WindEDIT Lite v1.3.1 and earlier, and Data File Manager v2.12.1 and earlier) allows an attacker to obtain the PLC Web server user credentials from the communication between the PLC and the software. As a result, the complete access privileges to the PLC Web server may be obtained, and manipulation of the PLC output and/or suspension of the PLC may be conducted.
0
Attacker Value
Unknown
CVE-2020-36493
Disclosure Date: October 22, 2021 (last updated February 23, 2025)
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component media_main.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEditor` and `CKEditorFuncNum` parameters.
0
Attacker Value
Unknown
CVE-2020-36497
Disclosure Date: October 22, 2021 (last updated February 23, 2025)
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component makehtml_homepage.php via the `filename`, `mid`, `userid`, and `templet' parameters.
0
Attacker Value
Unknown
CVE-2020-23046
Disclosure Date: October 22, 2021 (last updated February 23, 2025)
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component tpl.php via the `filename`, `mid`, `userid`, and `templet' parameters.
0
Attacker Value
Unknown
CVE-2020-36492
Disclosure Date: October 22, 2021 (last updated February 23, 2025)
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component select_media.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEditor` and `CKEditorFuncNum` parameters.
0
Attacker Value
Unknown
CVE-2020-36494
Disclosure Date: October 22, 2021 (last updated February 23, 2025)
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component mychannel_edit.php via the `filename`, `mid`, `userid`, and `templet' parameters.
0
Attacker Value
Unknown
CVE-2020-36491
Disclosure Date: October 22, 2021 (last updated February 23, 2025)
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component tags_main.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEditor` and `CKEditorFuncNum` parameters.
0
Attacker Value
Unknown
CVE-2020-36495
Disclosure Date: October 22, 2021 (last updated February 23, 2025)
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_manage_view.php via the `filename`, `mid`, `userid`, and `templet' parameters.
0
Attacker Value
Unknown
CVE-2020-36496
Disclosure Date: October 22, 2021 (last updated February 23, 2025)
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component sys_admin_user_edit.php via the `filename`, `mid`, `userid`, and `templet' parameters.
0
Attacker Value
Unknown
CVE-2020-36490
Disclosure Date: October 22, 2021 (last updated February 23, 2025)
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_manage_view.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEditor` and `CKEditorFuncNum` parameters.
0
