2020-01-22 - CVE Archive

CVE-2020-7109 Jan 22, 17:15 CRITICAL Act Now

The Elementor Page Builder plugin before 2.8.4 for WordPress does not sanitize data during creation of a new template. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Information Disclosure Website Builder Wordpress Plugin Elementor

NVD

CVSS 3.1

9.8

EPSS

1.7%

CVE-2020-6960 Jan 22, 15:15 CRITICAL Act Now

The following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build 595 T2-Patch, HNMSWVMSLT prior to Version VMS560 Build 595 T2-Patch, MAXPRO NVR: MAXPRO NVR XE prior to. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SQLi Honeywell Maxpro Nvr Se Firmware Maxpro Nvr Xe Firmware Maxpro Nvr Pe Firmware +3

NVD

CVSS 3.1

9.8

EPSS

1.1%

CVE-2020-6959 Jan 22, 15:15 CRITICAL Act Now

The following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build 595 T2-Patch, HNMSWVMSLT prior to Version VMS560 Build 595 T2-Patch, MAXPRO NVR: MAXPRO NVR XE prior to. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Deserialization Honeywell Maxpro Nvr Se Firmware Maxpro Nvr Xe Firmware +4

NVD

CVSS 3.1

9.8

EPSS

2.2%