| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-32268 | 6.8 | Buffer overflow vulnerability in function gf_fprintf in os_file.c in gpac before 1.0.1 allows attackers to execute arbitrary code. The fixed version is 1.0.1. | 2021-10-07 17:39:00 | 2021-09-20 16:15:00 |
| CVE-2020-15079 | 5.5 | In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, there is improper access control in Carrier page, Module Manager and Module Positions. The problem is fixed in version 1.7.6.6 | 2021-10-07 17:26:00 | 2020-07-02 17:15:00 |
| CVE-2020-11059 | 5.0 | In AEgir greater than or equal to 21.7.0 and less than 21.10.1, aegir publish and aegir build may leak secrets from environment variables in the browser bundle published to npm. This has been fixed in 21.10.1. | 2021-10-07 17:20:00 | 2020-05-27 21:15:00 |
| CVE-2020-11050 | 6.8 | In Java-WebSocket less than or equal to 1.4.1, there is an Improper Validation of Certificate with Host Mismatch where WebSocketClient does not perform SSL hostname validation. This has been patched in 1.5.0. | 2021-10-07 17:19:00 | 2020-05-07 21:15:00 |
| CVE-2020-18684 | 7.5 | Floodlight through 1.2 has an integer overflow in checkFlow in StaticFlowEntryPusherResource.java via priority or port number. | 2021-10-07 17:17:00 | 2021-09-30 02:15:00 |
| CVE-2020-15099 | 6.8 | In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.20, and greater than or equal to 10.0.0 and less than 10.4.6, in a case where an attacker manages to generate a valid cryptographic message authentication code (HMAC-SHA1) - either by usin | 2021-10-07 17:16:00 | 2020-07-29 17:15:00 |
| CVE-2020-15102 | 4.0 | In PrestaShop Dashboard Productions before version 2.1.0, there is improper authorization which enables an attacker to change the configuration. The problem is fixed in 2.1.0. | 2021-10-07 17:14:00 | 2020-07-21 18:15:00 |
| CVE-2020-15111 | 5.8 | In Fiber before version 1.12.6, the filename that is given in c.Attachment() (https://docs.gofiber.io/ctx#attachment) is not escaped, and therefore vulnerable for a CRLF injection attack. I.e. an attacker could upload a custom filename and then give | 2021-10-07 17:14:00 | 2020-07-20 18:15:00 |
| CVE-2020-8186 | 7.5 | A command injection vulnerability in the `devcert` module may lead to remote code execution when users of the module pass untrusted input to the `certificateFor` function. | 2021-10-07 17:13:00 | 2020-07-10 16:15:00 |
| CVE-2021-0226 | 5.0 | On Juniper Networks Junos OS Evolved devices, receipt of a specific IPv6 packet may cause an established IPv6 BGP session to terminate, creating a Denial of Service (DoS) condition. Continued receipt and processing of this packet will create a sustai | 2021-10-07 17:12:00 | 2021-04-22 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: