| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-12169 | 6.8 | ATutor 2.2.4 allows Arbitrary File Upload and Directory Traversal, resulting in remote code execution via a ".." pathname in a ZIP archive to the mods/_core/languages/language_import.php (aka Import New Language) or mods/_standard/patcher/index_admin | 2022-04-22 20:11:00 | 2019-06-03 20:29:00 |
| CVE-2019-11873 | 7.5 | wolfSSL 4.0.0 has a Buffer Overflow in DoPreSharedKeys in tls13.c when a current identity size is greater than a client identity size. An attacker sends a crafted hello client packet over the network to a TLSv1.3 wolfSSL server. The length fields of | 2022-04-22 20:11:00 | 2019-05-23 13:29:00 |
| CVE-2019-8443 | 6.8 | The ViewUpgrades resource in Jira before version 7.13.4, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers who have obtained access to administrator's session to access the ViewUpgrades admin | 2022-04-22 20:10:00 | 2019-05-22 18:29:00 |
| CVE-2019-8442 | 5.0 | The CachingResourceDownloadRewriteRule class in Jira before version 7.13.4, and from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to access files in the Jira webroot under the META-INF direct | 2022-04-22 20:10:00 | 2019-05-22 18:29:00 |
| CVE-2019-3400 | 4.3 | The labels gadget in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the jql parameter. | 2022-04-22 20:10:00 | 2019-05-03 20:29:00 |
| CVE-2019-11579 | 5.0 | dhcp.c in dhcpcd before 7.2.1 contains a 1-byte read overflow with DHO_OPTSOVERLOADED. | 2022-04-22 20:09:00 | 2019-04-28 16:29:00 |
| CVE-2019-10875 | 4.3 | A URL spoofing vulnerability was found in all international versions of Xiaomi Mi browser 10.5.6-g (aka the MIUI native browser) and Mint Browser 1.5.3 due to the way they handle the "q" query parameter. The portion of an https URL before the ?q= sub | 2022-04-22 20:04:00 | 2019-04-05 13:29:00 |
| CVE-2019-14864 | 4.0 | Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag no_log set it to True when Sumologic and Splunk callback plugins are used send tasks results events to collectors. This woul | 2022-04-22 19:59:00 | 2020-01-02 15:15:00 |
| CVE-2019-14846 | 2.1 | In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level which lead to a disclosure of credentials if a plugin used a library that logged credentials at the DEBU | 2022-04-22 19:56:00 | 2019-10-08 19:15:00 |
| CVE-2019-15635 | 4.0 | An issue was discovered in Grafana 5.4.0. Passwords for data sources used by Grafana (e.g., MySQL) are not encrypted. An admin user can reveal passwords for any data source by pressing the "Save and test" button within a data source's settings menu. | 2022-04-22 19:56:00 | 2019-09-23 17:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: