| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-27192 | 7.2 | BinaryNights ForkLift 3.4 was compiled with the com.apple.security.cs.disable-library-validation flag enabled which allowed a local attacker to inject code into ForkLift. This would allow the attacker to run malicious code with escalated privileges t | 2021-07-21 11:39:00 | 2020-11-17 02:15:00 |
| CVE-2020-15349 | 7.2 | BinaryNights ForkLift 3.x before 3.4 has a local privilege escalation vulnerability because the privileged helper tool implements an XPC interface that allows file operations to any process (copy, move, delete) as root and changing permissions. | 2021-07-21 11:39:00 | 2020-11-17 02:15:00 |
| CVE-2020-13358 | 2.1 | A vulnerability in the internal Kubernetes agent api in GitLab CE/EE version 13.3 and above allows unauthorized access to private projects. Affected versions are: >=13.4, <13.4.5,>=13.3, <13.3.9,>=13.5, <13.5.2. | 2021-07-21 11:39:00 | 2020-11-17 01:15:00 |
| CVE-2020-26510 | 5.0 | Airleader Master <= 6.21 devices have default credentials that can be used to access the exposed Tomcat Manager for deployment of a new .war file, with resultant remote code execution. | 2021-07-21 11:39:00 | 2020-11-16 19:15:00 |
| CVE-2020-23490 | 5.0 | There was a local file disclosure vulnerability in AVideo < 8.9 via the proxy streaming. An unauthenticated attacker can exploit this issue to read an arbitrary file on the server. Which could leak database credentials or other sensitive information | 2021-07-21 11:39:00 | 2020-11-16 18:15:00 |
| CVE-2020-23489 | 6.5 | The import.json.php file before 8.9 for Avideo is vulnerable to a File Deletion vulnerability. This allows the deletion of configuration.php, which leads to certain privilege checks not being in place, and therefore a user can escalate privileges to | 2021-07-21 11:39:00 | 2020-11-16 18:15:00 |
| CVE-2020-28723 | 5.0 | Memory leak in IPv6Param::setAddress in CloudAvid PParam 1.3.1. | 2021-07-21 11:39:00 | 2020-11-16 17:15:00 |
| CVE-2020-25210 | 5.0 | In JetBrains YouTrack before 2020.3.7955, an attacker could access workflow rules without appropriate access grants. | 2021-07-21 11:39:00 | 2020-11-16 15:15:00 |
| CVE-2020-25209 | 5.0 | In JetBrains YouTrack before 2020.3.6638, improper access control for some subresources leads to information disclosure via the REST API. | 2021-07-21 11:39:00 | 2020-11-16 15:15:00 |
| CVE-2020-24366 | 2.1 | Sensitive information could be disclosed in the JetBrains YouTrack application before 2020.2.0 for Android via application backups. | 2021-07-21 11:39:00 | 2020-11-16 15:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: