Look up vulnerabilities by software, product or CVE number.
| CVE | Published | CVSS | ShadowTrackr CVSS | Summary |
|---|---|---|---|---|
CVE: CVE-2020-1916 | Published 2021-03-10 | CVSS: 9.8 | ShadowTrackr CVSS: 7.2 | Summary: An incorrect size calculation in ldap_escape may lead to an integer overflow when overly long input is passed in, resulting in an out-of-bounds write. This issue affects HHVM prior to 4.56.2, all versions between 4.57.0 and 4.78.0, 4.79.0, 4.80.0, 4.81.0, 4.82.0, 4.83.0. |
CVE: CVE-2020-19165 | Published 2020-12-11 | CVSS: 9.8 | ShadowTrackr CVSS: 7.2 | Summary: PHPSHE 1.7 has SQL injection via the admin.php?mod=user&userlevel_id=1 userlevel_id[] parameter. |