Look up vulnerabilities by software, product or CVE number.
| CVE | Published | CVSS | ShadowTrackr CVSS | Summary |
|---|---|---|---|---|
CVE: CVE-2020-3532 | Published 2024-11-18 | CVSS: 6.1 | ShadowTrackr CVSS: 0.5 | Summary: A vulnerability in the web-based management interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, and Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.
The vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.There are no workarounds that address this vulnerability. |
CVE: CVE-2020-35326 | Published 2023-01-18 | CVSS: 9.8 | ShadowTrackr CVSS: 7.2 | Summary: SQL Injection vulnerability in file /inxedu/demo_inxedu_open/src/main/resources/mybatis/inxedu/website/WebsiteImagesMapper.xml in inxedu 2.0.6 via the id value. |
CVE: CVE-2020-35329 | Published 2021-03-04 | CVSS: 6.5 | ShadowTrackr CVSS: 2.3 | Summary: Courier Management System 1.0 1.0 is affected by SQL Injection via 'MULTIPART street '. |
CVE: CVE-2020-35328 | Published 2021-03-04 | CVSS: 5.4 | ShadowTrackr CVSS: 0.4 | Summary: Courier Management System 1.0 - 'First Name' Stored XSS |
CVE: CVE-2020-35327 | Published 2021-03-04 | CVSS: 6.5 | ShadowTrackr CVSS: 2.3 | Summary: SQL injection vulnerability was discovered in Courier Management System 1.0, which can be exploited via the ref_no (POST) parameter to admin_class.php |