| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-29378 | 9.0 | An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. It is possible to elevate the privilege of a CLI user (to full administrative access) b | 2021-07-21 11:39:00 | 2020-11-29 01:15:00 |
| CVE-2020-28922 | 7.2 | An issue was discovered in Devid Espenschied PC Analyser through 4.10. The PCADRVX64.SYS kernel driver exposes IOCTL functionality that allows low-privilege users to read and write arbitrary physical memory. This could lead to arbitrary Ring-0 code e | 2021-07-21 11:39:00 | 2020-11-27 18:15:00 |
| CVE-2020-28921 | 7.2 | An issue was discovered in Devid Espenschied PC Analyser through 4.10. The PCADRVX64.SYS kernel driver exposes IOCTL functionality that allows low-privilege users to read and write to arbitrary Model Specific Registers (MSRs). This could lead to arbi | 2021-07-21 11:39:00 | 2020-11-27 18:15:00 |
| CVE-2019-19878 | 5.0 | An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to historical data from AprolSqlServer by bypassing authentication, a different vulnerability than CVE-2019-16358. | 2021-07-21 11:39:00 | 2020-11-27 17:15:00 |
| CVE-2019-19874 | 7.5 | An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. Some web scripts in the web interface allowed injection and execution of arbitrary unintended commands on the web server, a different vulnerability than CVE-2019-16364. | 2021-07-21 11:39:00 | 2020-11-27 17:15:00 |
| CVE-2019-19873 | 5.0 | An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get information from the AprolSqlServer DBMS by bypassing authentication, a different vulnerability than CVE-2019-16356 and CVE-2019-9983. | 2021-07-21 11:39:00 | 2020-11-27 17:15:00 |
| CVE-2019-19872 | 7.5 | An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. The AprolLoader could be used to inject and execute arbitrary unintended commands via an unspecified attack scenario, a different vulnerability than CVE-2019-16364. | 2021-07-21 11:39:00 | 2020-11-27 15:15:00 |
| CVE-2020-29135 | 3.5 | cPanel before 90.0.17 has multiple instances of URL parameter injection (SEC-567). | 2021-07-21 11:39:00 | 2020-11-27 02:15:00 |
| CVE-2020-29043 | 5.0 | An issue was discovered in BigBlueButton through 2.2.29. When at attacker is able to view an account_activations/edit?token= URI, the attacker can create an approved user account associated with an email address that has an arbitrary domain name. | 2021-07-21 11:39:00 | 2020-11-26 18:15:00 |
| CVE-2020-27663 | 4.0 | In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read data from any itemType (e.g., Ticket, Users, etc.). | 2021-07-21 11:39:00 | 2020-11-26 17:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: