Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2020-25359 6.4 An arbitrary file deletion vulnerability in rConfig 3.9.5 has been fixed for 3.9.6. This vulnerability gave attackers the ability to send a crafted request to /lib/ajaxHandlers/ajaxDeleteAllLoggingFiles.php by specifying a path in the path parameter 2022-10-05 18:28:00
CVE-2020-19419 5.0 Incorrect Access Control in Emerson Smart Wireless Gateway 1420 4.6.59 allows remote attackers to obtain sensitive device information from the administrator console without authentication. 2022-10-05 18:28:00
CVE-2021-3582 2.1 A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVRDMA_CMD_CREATE_MR" command due to improper memory remapping (mremap). This flaw allows a malicious guest to crash the QEMU process 2022-10-05 18:26:00
CVE-2020-18731 5.0 A segmentation violation in the Iec104_Deal_FirmUpdate function of IEC104 v1.0 allows attackers to cause a denial of service (DOS). 2022-10-05 17:45:00
CVE-2020-18730 5.0 A segmentation violation in the Iec104_Deal_I function of IEC104 v1.0 allows attackers to cause a denial of service (DOS). 2022-10-05 17:45:00
CVE-2021-21912 7.2 A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 (30.07.2021). A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An 2022-10-05 17:25:00
CVE-2020-19861 5.0 When a zone file in ldns 1.7.1 is parsed, the function ldns_nsec3_salt_data is too trusted for the length value obtained from the zone file. When the memcpy is copied, the 0xfe - ldns_rdf_size(salt_rdf) byte data can be copied, causing heap overflow 2022-10-05 17:08:00
CVE-2020-20944 6.4 An issue in /admin/index.php?lfj=mysql&action=del of Qibosoft v7 allows attackers to arbitrarily delete files. 2022-10-05 17:08:00
CVE-2020-18127 4.0 An issue in the /config/config.php component of Indexhibit 2.1.5 allows attackers to arbitrarily view files. 2022-10-05 17:00:00
CVE-2022-22971 4.0 In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user. 2022-10-05 16:54:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/40236
Zapisa po stranici: