Most recent entries from all

cnvd-2020-66284

EUVD-2026-36687

fkie_cve-2020-5664

Deserialization of untrusted data vulnerability in XooNIps 3.49 and earlier allows remote attackers to execute arbitrary code via unspecified vectors.

GHSA-vj2f-c594-7c7c

Deserialization of untrusted data vulnerability in XooNIps 3.49 and earlier allows remote attackers to execute arbitrary code via unspecified vectors.

gsd-2020-5664

jvndb-2020-009467

XOOPS module "XooNIps" contains multiple vulnerabilities listed below. * SQL injection (CWE-89) - CVE-2020-5659 * Reflected cross-site scripting (CWE-79) - CVE-2020-5662 * Stored cross-site scripting (CWE-79) - CVE-2020-5663 * Deserialization of untrusted data (CWE-502) - CVE-2020-5664 stypr of Flatt Security Inc. reported this vulnerability to the developer and coordinated on his own. After coordination was completed, this case was reported to JPCERT/CC, and JPCERT/CC coordinated with the developer for the publication.