| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-3802 | 5.0 | This affects Spring Data JPA in versions up to and including 2.1.6, 2.0.14 and 1.11.20. ExampleMatcher using ExampleMatcher.StringMatcher.STARTING, ExampleMatcher.StringMatcher.ENDING or ExampleMatcher.StringMatcher.CONTAINING could return more resul | 2021-10-29 19:51:00 | 2019-06-03 14:29:00 |
| CVE-2019-3801 | 5.0 | Cloud Foundry cf-deployment, versions prior to 7.9.0, contain java components that are using an insecure protocol to fetch dependencies when building. A remote unauthenticated malicious attacker could hijack the DNS entry for the dependency, and inje | 2021-10-29 19:45:00 | 2019-04-25 21:29:00 |
| CVE-2019-19164 | 6.8 | dext5.ocx ActiveX Control in Dext5 Upload 5.0.0.112 and earlier versions contains a vulnerability that could allow remote files to be executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted w | 2021-10-29 19:29:00 | 2020-05-07 18:15:00 |
| CVE-2019-19337 | 4.0 | A flaw was found in Red Hat Ceph Storage version 3 in the way the Ceph RADOS Gateway daemon handles S3 requests. An authenticated attacker can abuse this flaw by causing a remote denial of service by sending a specially crafted HTTP Content-Length he | 2021-10-29 19:22:00 | 2019-12-23 17:15:00 |
| CVE-2019-19285 | 3.5 | A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow injections that could lead to XSS attacks if unsuspecting users are tricked into accessing a malicious link. | 2021-10-29 19:21:00 | 2020-12-14 21:15:00 |
| CVE-2019-1940 | 4.3 | A vulnerability in the Web Services Management Agent (WSMA) feature of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data using an invalid X.509 certificate. The | 2021-10-29 19:16:00 | 2019-07-17 21:15:00 |
| CVE-2019-18254 | 2.1 | BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest. An attacker with physical access to the CardioMessenger can disclose medical measurement data and the serial number from the implanted cardiac dev | 2021-10-29 19:14:00 | 2020-06-29 14:15:00 |
| CVE-2019-18250 | 7.5 | In all versions of ABB Power Generation Information Manager (PGIM) and Plant Connect, the affected product is vulnerable to authentication bypass, which may allow an attacker to remotely bypass authentication and extract credentials from the affected | 2021-10-29 19:11:00 | 2019-11-26 00:15:00 |
| CVE-2019-17146 | 10.0 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link DCS-960L v1.07.102. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HNAP service, which listens | 2021-10-29 18:48:00 | 2020-01-07 23:15:00 |
| CVE-2019-17101 | 4.6 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in firmware versions prior to x.xx of Netatmo Smart Indoor Camera allows an attacker to execute commands on the device. This issue affects: Netatmo Smar | 2021-10-29 18:42:00 | 2020-04-23 19:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: