Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2019-16394 5.0 SPIP before 3.1.11 and 3.2 before 3.2.5 provides different error messages from the password-reminder page depending on whether an e-mail address exists, which might help attackers to enumerate subscribers. 2022-05-03 14:28:00
CVE-2019-15947 5.0 In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it may dump a core file. If a user were to mishandle a core file, an attacker can reconstruct the user's wallet.dat file, including their private keys, via 2022-05-03 14:28:00
CVE-2019-15813 6.5 Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arbitrary code via a webshell. 2022-05-03 14:28:00
CVE-2020-12769 4.9 An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one, aka CID-19b61392c5a8. 2022-05-03 14:21:00
CVE-2020-12105 4.3 OpenConnect through 8.08 mishandles negative return values from X509_check_ function calls, which might assist attackers in performing man-in-the-middle attacks. 2022-05-03 14:21:00
CVE-2020-0987 2.1 An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0982, CVE- 2022-05-03 14:18:00
CVE-2020-10514 6.5 iCatch DVR firmware before 20200103 do not validate function parameter properly, resulting attackers executing arbitrary command. 2022-05-03 14:06:00
CVE-2020-10513 4.0 The file management interface of iCatch DVR firmware before 20200103 contains broken access control which allows the attacker to remotely manipulate arbitrary file. 2022-05-03 14:06:00
CVE-2020-10511 10.0 HGiga C&Cmail CCMAILQ before olln-base-6.0-418.i386.rpm and CCMAILN before olln-base-5.0-418.i386.rpm contains insecure configurations. Attackers can exploit these flaws to access unauthorized functionality via a crafted URL. 2022-05-03 14:06:00
CVE-2020-9004 9.0 A remote authenticated authorization-bypass vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any read-only user to issue requests to the administration panel in order to change functionality. For example, a read-only user may activate 2022-05-03 14:06:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/39953
Zapisa po stranici: