Online Business Fraud Down, Consumer Fraud Up

Enterprise VulnerabilitiesFrom DHS/US-CERT's National Vulnerability Database CVE-2020-14042PUBLISHED: 2020-08-25

** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Site Scripting (XSS) vulnerability was found in Codiad v1.7.8 and later. The vulnerability occurs because of improper sanitization of the folder's name $path variable in components/filemanager/class.filemanager.php. NOTE: the vendor states "Codi...

CVE-2020-24609PUBLISHED: 2020-08-25

TechKshetra Info Solutions Pvt. Ltd Savsoft Quiz 5 has XSS which can result in an attacker injecting the XSS payload in the User Registration section and each time the admin visits the manage user section from the admin panel, the XSS triggers and the attacker can steal the cookie via crafted payloa...

CVE-2020-14522PUBLISHED: 2020-08-25

Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to uncontrolled resource consumption, which may allow an attacker to cause a denial-of-service condition.

CVE-2020-14524PUBLISHED: 2020-08-25

Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.

CVE-2020-24240PUBLISHED: 2020-08-25

GNU Bison 3.7 has a use after free (UAF) vulnerability. A local attacker may execute bison with crafted input file containing a NULL ..

Support the originator by clicking the read the rest link below.