| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-13223 | 5.0 | HashiCorp Vault and Vault Enterprise logged proxy environment variables that potentially included sensitive credentials. Fixed in 1.3.6 and 1.4.2. | 2022-02-21 04:58:00 | 2020-06-10 19:15:00 |
| CVE-2020-7218 | 5.0 | HashiCorp Nomad and Nonad Enterprise up to 0.10.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 0.10.3. | 2022-02-20 07:01:00 | 2020-01-31 13:15:00 |
| CVE-2015-5745 | 4.0 | Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users to cause a denial of service (QEMU process crash) via a crafted virtio control message. | 2022-02-20 06:45:00 | 2020-01-23 20:15:00 |
| CVE-2019-16516 | 5.0 | An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. There is a user enumeration vulnerability, allowing an unauthenticated attacker to determine with certainty if an account exists for a given username. | 2022-02-20 06:44:00 | 2020-01-23 18:15:00 |
| CVE-2019-10174 | 6.5 | A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private methods in any class with Infinispan's privileges. The attacker can use reflection to in | 2022-02-20 06:31:00 | 2019-11-25 11:15:00 |
| CVE-2019-18818 | 7.5 | strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controllers/Auth.js. | 2022-02-20 06:22:00 | 2019-11-07 22:15:00 |
| CVE-2019-10212 | 4.3 | A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials from the log files. | 2022-02-20 06:20:00 | 2019-10-02 19:15:00 |
| CVE-2019-10184 | 5.0 | undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory structures predicted through requests without trailing slashes via the api. | 2022-02-20 06:11:00 | 2019-07-25 21:15:00 |
| CVE-2019-3888 | 5.0 | A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowLogger.REQUE | 2022-02-20 06:11:00 | 2019-06-12 14:29:00 |
| CVE-2018-17036 | 7.5 | An issue was discovered in UCMS 1.4.6 and 1.6. It allows PHP code injection during installation via the systemdomain parameter to install/index.php, as demonstrated by injecting a phpinfo() call into /inc/config.php. | 2022-02-20 06:07:00 | 2018-09-14 07:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: