CVE-2020-35769

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

miniserv.pl in Webmin 1.962 on Windows mishandles special characters in query arguments to the CGI program.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Dec 29, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-35777.4A vulnerability in the ingress packet processing path of Cisco Firepower Threat Defense (FTD) Software for interfaces that are configured eiCVE-2020-357738.8The site-offline plugin before 1.4.4 for WordPress lacks certain wp_create_nonce and wp_verify_nonce calls, aka CSRF.CVE-2020-357745.4server/handler/HistogramQueryHandler.scala in Twitter TwitterServer (aka twitter-server) before 20.12.0, in some configurations, allows XSS CVE-2020-357759.8CITSmart before 9.1.2.23 allows LDAP Injection.CVE-2020-357766.5A buffer overflow in res_pjsip_diversion.c in Sangoma Asterisk versions 13.38.1, 16.15.1, 17.9.1, and 18.1.1 allows remote attacker to crashCVE-2020-357778.4NETGEAR DGN2200v1 devices before v1.0.0.58 are affected by command injection.CVE-2020-357788.8Certain NETGEAR devices are affected by CSRF. This affects GS716Tv3 before 6.3.1.36 and GS724Tv4 before 6.3.1.36.CVE-2020-357798.6NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service.CVE-2020-35786.5A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) SCVE-2020-357806.5NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service.CVE-2020-357816.5NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service.CVE-2020-357828.1Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524Ev2 befor
CVE-2020-35769: Critical severity, CVSS 9.8 | Vulnix