| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-26506 | 4.0 | An Authorization Bypass vulnerability in the Marmind web application with version 4.1.141.0 allows users with lower privileges to gain control to files uploaded by administrative users. The accessed files were not visible by the low privileged users | 2021-07-21 11:39:00 | 2020-11-05 16:15:00 |
| CVE-2020-25399 | 6.8 | Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat. | 2021-07-21 11:39:00 | 2020-11-05 16:15:00 |
| CVE-2020-24849 | 6.5 | A remote code execution vulnerability is identified in FruityWifi through 2.4. Due to improperly escaped shell metacharacters obtained from the POST request at the page_config_adv.php page, it is possible to perform remote code execution by an authen | 2021-07-21 11:39:00 | 2020-11-05 15:15:00 |
| CVE-2020-15951 | 4.3 | Immuta v2.8.2 accepts user-supplied project names without properly sanitizing the input, allowing attackers to inject arbitrary HTML content that is rendered as part of the application. An attacker could leverage this to redirect application users to | 2021-07-21 11:39:00 | 2020-11-05 15:15:00 |
| CVE-2020-15949 | 5.0 | Immuta v2.8.2 is affected by one instance of insecure permissions that can lead to user account takeover. | 2021-07-21 11:39:00 | 2020-11-05 15:15:00 |
| CVE-2020-7763 | 5.0 | This affects the package phantom-html-to-pdf before 0.6.1. | 2021-07-21 11:39:00 | 2020-11-05 14:15:00 |
| CVE-2020-7762 | 4.0 | This affects the package jsreport-chrome-pdf before 1.10.0. | 2021-07-21 11:39:00 | 2020-11-05 13:15:00 |
| CVE-2020-7129 | 9.0 | A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2. | 2021-07-21 11:39:00 | 2020-11-04 20:15:00 |
| CVE-2020-7128 | 10.0 | A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2. | 2021-07-21 11:39:00 | 2020-11-04 20:15:00 |
| CVE-2020-22275 | 6.8 | Easy Registration Forms (ER Forms) Wordpress Plugin 2.0.6 allows an attacker to submit an entry with malicious CSV commands. After that, when the system administrator generates CSV output from the forms information, there is no check on this inputs a | 2021-07-21 11:39:00 | 2020-11-04 17:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: