| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-13359 | 5.5 | The Terraform API in GitLab CE/EE 12.10+ exposed the object storage signed URL on the delete operation allowing a malicious project maintainer to overwrite the Terraform state, bypassing audit and other business controls. Affected versions are >=12.1 | 2021-07-21 11:39:00 | 2020-11-19 00:15:00 |
| CVE-2020-28572 | 4.6 | A vulnerability in Trend Micro Apex One could allow an unprivileged user to abuse the product installer to reinstall the agent with additional malicious code in the context of a higher privilege. | 2021-07-21 11:39:00 | 2020-11-18 19:15:00 |
| CVE-2020-26552 | 5.0 | An issue was discovered in Aviatrix Controller before R6.0.2483. Multiple executable files, that implement API endpoints, do not require a valid session ID for access. | 2021-07-21 11:39:00 | 2020-11-17 21:15:00 |
| CVE-2020-26550 | 5.0 | An issue was discovered in Aviatrix Controller before R5.3.1151. An encrypted file containing credentials to unrelated systems is protected by a three-character key. | 2021-07-21 11:39:00 | 2020-11-17 21:15:00 |
| CVE-2020-13349 | 4.0 | An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted in the Advanced Search feature susceptible to catastrophic backtracking. Affected versions are >=8.12, <13.3.9,> | 2021-07-21 11:39:00 | 2020-11-17 19:15:00 |
| CVE-2020-25400 | 5.0 | Cross domain policies in Taskcafe Project Management tool before version 0.1.0 and 0.1.1 allows remote attackers to access sensitive data such as access token. | 2021-07-21 11:39:00 | 2020-11-17 18:15:00 |
| CVE-2020-27557 | 2.1 | Unprotected Storage of Credentials vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 allows local users to gain access to the video streaming username and password via SQLite files containing plain text credentials. | 2021-07-21 11:39:00 | 2020-11-17 15:15:00 |
| CVE-2020-27556 | 5.0 | A predictable device ID in BASETech GE-131 BT-1837836 firmware 20180921 allows unauthenticated remote attackers to connect to the device. | 2021-07-21 11:39:00 | 2020-11-17 15:15:00 |
| CVE-2020-27555 | 10.0 | Use of default credentials for the telnet server in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to execute arbitrary system commands as the root user. | 2021-07-21 11:39:00 | 2020-11-17 15:15:00 |
| CVE-2020-27554 | 5.0 | Cleartext Transmission of Sensitive Information vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 exists which could leak sensitive information transmitted between the mobile app and the camera device. | 2021-07-21 11:39:00 | 2020-11-17 15:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: