| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-6143 | 6.4 | Forcepoint Next Generation Firewall (Forcepoint NGFW) 6.4.x before 6.4.7, 6.5.x before 6.5.4, and 6.6.x before 6.6.2 has a serious authentication vulnerability that potentially allows unauthorized users to bypass password authentication and access se | 2022-04-18 16:11:00 | 2019-08-20 21:15:00 |
| CVE-2019-15046 | 5.0 | Zoho ManageEngine ServiceDesk Plus 10 before 10509 allows unauthenticated sensitive information leakage during Fail Over Service (FOS) replication, aka SD-79989. | 2022-04-18 16:10:00 | 2019-08-14 15:15:00 |
| CVE-2022-20073 | 4.4 | In preloader (usb), there is a possible out of bounds write due to a integer underflow. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User inte | 2022-04-18 16:07:00 | 2022-04-11 20:15:00 |
| CVE-2022-20072 | 4.6 | In search engine service, there is a possible way to change the default search engine due to an incorrect comparison. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploita | 2022-04-18 16:06:00 | 2022-04-11 20:15:00 |
| CVE-2019-14763 | 4.9 | In the Linux kernel before 4.16.4, a double-locking error in drivers/usb/dwc3/gadget.c may potentially cause a deadlock with f_hid. | 2022-04-18 16:04:00 | 2019-08-07 22:15:00 |
| CVE-2019-13104 | 6.8 | In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack) while reading a crafted ext4 filesystem. | 2022-04-18 16:04:00 | 2019-08-06 19:15:00 |
| CVE-2019-19866 | 5.0 | Atos Unify OpenScape UC Web Client V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows remote attackers to obtain sensitive information. By iterating the value of conferenceId to getMailFunction in the JSON API, one can enumerate al | 2022-04-18 15:57:00 | 2020-02-21 16:15:00 |
| CVE-2019-6146 | 4.3 | It has been reported that cross-site scripting (XSS) is possible in Forcepoint Web Security, version 8.x, via host header injection. CVSSv3.0: 5.3 (Medium) (/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) | 2022-04-18 15:50:00 | 2020-01-22 17:15:00 |
| CVE-2020-6857 | 2.1 | CarbonFTP v1.4 uses insecure proprietary password encryption with a hard-coded weak encryption key. The key for local FTP server passwords is hard-coded in the binary. | 2022-04-18 15:49:00 | 2020-01-21 17:15:00 |
| CVE-2020-7241 | 5.0 | The WP Database Backup plugin through 5.5 for WordPress stores downloads by default locally in the directory wp-content/uploads/db-backup/. This might allow attackers to read ZIP archives by guessing random ID numbers, guessing date strings with a 20 | 2022-04-18 15:49:00 | 2020-01-20 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: