Search vulnerabilities

Results 2

Export CSV
CVE-2020-19001

Command Injection in Simiki v1.6.2.1 and prior allows remote attackers to execute arbitrary system commands via line 64 of the component 'simiki/blob/master/simiki/config.py'.

CVSS 3.1 · 9.8 Critical EPSS 4.3% KEV · Not listed
Vendors
Products
CVE-2020-19000

Cross Site Scripting (XSS) in Simiki v1.6.2.1 and prior allows remote attackers to execute arbitrary code via line 54 of the component 'simiki/blob/master/simiki/generators.py'.

CVSS 3.1 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Products