| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-3492 | 7.8 | A vulnerability in the Flexible NetFlow Version 9 packet processor of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers and Cisco AireOS Software for Cisco Wireless LAN Controllers (WLC) could allow an unauthenticated, remote | 2021-10-19 18:44:00 | 2020-09-24 18:15:00 |
| CVE-2020-3489 | 6.1 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a | 2021-10-19 18:44:00 | 2020-09-24 18:15:00 |
| CVE-2020-3488 | 6.1 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a | 2021-10-19 18:44:00 | 2020-09-24 18:15:00 |
| CVE-2020-3486 | 6.1 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a | 2021-10-19 18:44:00 | 2020-09-24 18:15:00 |
| CVE-2021-20128 | 3.5 | The Profile Name field in the floor plan (Network Menu) page in Draytek VigorConnect 1.6.0-B3 was found to be vulnerable to stored XSS, as user input is not properly sanitized. | 2021-10-19 18:34:00 | 2021-10-13 16:15:00 |
| CVE-2021-35060 | 5.0 | /way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to leverage response differences to discover whether a specific payment card number is stored in the system. | 2021-10-19 18:26:00 | 2021-10-11 09:15:00 |
| CVE-2021-20127 | 8.5 | An arbitrary file deletion vulnerability exists in the file delete functionality of the Html5Servlet endpoint of Draytek VigorConnect 1.6.0-B3. This allows an authenticated user to arbitrarily delete files in any location on the target operating syst | 2021-10-19 18:10:00 | 2021-10-13 16:15:00 |
| CVE-2021-40889 | 7.5 | CMSUno version 1.7.2 is affected by a PHP code execution vulnerability. sauvePass action in {webroot}/uno/central.php file calls to file_put_contents() function to write username in password.php file when a user successfully changed their password. T | 2021-10-19 18:10:00 | 2021-10-11 10:15:00 |
| CVE-2021-20126 | 6.8 | Draytek VigorConnect 1.6.0-B3 lacks cross-site request forgery protections and does not sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request. | 2021-10-19 17:38:00 | 2021-10-13 16:15:00 |
| CVE-2021-20125 | 10.0 | An arbitrary file upload and directory traversal vulnerability exists in the file upload functionality of DownloadFileServlet in Draytek VigorConnect 1.6.0-B3. An unauthenticated attacker could leverage this vulnerability to upload files to any locat | 2021-10-19 16:53:00 | 2021-10-13 16:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: