| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-10927 | 8.3 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the enc | 2021-10-26 20:03:00 | 2020-07-28 18:15:00 |
| CVE-2020-10887 | 7.5 | This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of IPv6 connect | 2021-10-26 20:03:00 | 2020-03-25 21:15:00 |
| CVE-2020-11012 | 5.0 | MinIO versions before RELEASE.2020-04-23T00-58-49Z have an authentication bypass issue in the MinIO admin API. Given an admin access key, it is possible to perform admin API operations i.e. creating new service accounts for existing access keys - wit | 2021-10-26 20:02:00 | 2020-04-23 22:15:00 |
| CVE-2020-11000 | 4.3 | GreenBrowser before version 1.2 has a vulnerability where apps that rely on URL Parsing to verify that a given URL is pointing to a trust server may be susceptible to many different ways to get URL parsing and verification wrong, which allows an atta | 2021-10-26 20:02:00 | 2020-04-08 17:15:00 |
| CVE-2020-11024 | 4.9 | In Moonlight iOS/tvOS before 4.0.1, the pairing process is vulnerable to a man-in-the-middle attack. The bug has been fixed in Moonlight v4.0.1 for iOS and tvOS. | 2021-10-26 20:01:00 | 2020-04-29 21:15:00 |
| CVE-2020-11056 | 6.5 | In Sprout Forms before 3.9.0, there is a potential Server-Side Template Injection vulnerability when using custom fields in Notification Emails which could lead to the execution of Twig code. This has been fixed in 3.9.0. | 2021-10-26 20:00:00 | 2020-05-07 21:15:00 |
| CVE-2021-24679 | 4.3 | The Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin before 1.6.1 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue | 2021-10-26 19:58:00 | 2021-10-04 12:15:00 |
| CVE-2020-15093 | 5.0 | The tough library (Rust/crates.io) prior to version 0.7.1 does not properly verify the threshold of cryptographic signatures. It allows an attacker to duplicate a valid signature in order to circumvent TUF requiring a minimum threshold of unique sign | 2021-10-26 19:58:00 | 2020-07-09 19:15:00 |
| CVE-2021-27746 | 3.5 | "HCL Connections Security Update for Reflected Cross-Site Scripting (XSS) Vulnerability" | 2021-10-26 19:57:00 | 2021-10-21 21:15:00 |
| CVE-2021-35228 | 2.6 | This vulnerability occurred due to missing input sanitization for one of the output fields that is extracted from headers on specific section of page causing a reflective cross site scripting attack. An attacker would need to perform a Man in the Mid | 2021-10-26 19:53:00 | 2021-10-21 18:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: