| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-4722 | 9.3 | IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to exec | 2021-07-21 11:39:00 | 2020-10-29 16:15:00 |
| CVE-2020-4721 | 9.3 | IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to exec | 2021-07-21 11:39:00 | 2020-10-29 16:15:00 |
| CVE-2020-11616 | 5.0 | NVIDIA DGX servers, all BMC firmware versions prior to 3.38.30, contain a vulnerability in the AMI BMC firmware in which the Pseudo-Random Number Generator (PRNG) algorithm used in the JSOL package that implements the IPMI protocol is not cryptograph | 2021-07-21 11:39:00 | 2020-10-29 04:15:00 |
| CVE-2020-11489 | 5.0 | NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contain a vulnerability in the AMI BMC firmware in which default SNMP community strings are used, which may lead to i | 2021-07-21 11:39:00 | 2020-10-29 04:15:00 |
| CVE-2020-11484 | 4.0 | NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30, contains a vulnerability in the AMI BMC firmware in which an attacker with administrative privileges can obtain the hash of the BMC/IPMI user password, which may lead to infor | 2021-07-21 11:39:00 | 2020-10-29 04:15:00 |
| CVE-2020-16262 | 7.2 | Winston 1.5.4 devices have a local www-data user that is overly permissioned, resulting in root privilege escalation. | 2021-07-21 11:39:00 | 2020-10-28 18:15:00 |
| CVE-2020-16261 | 7.2 | Winston 1.5.4 devices allow a U-Boot interrupt, resulting in local root access. | 2021-07-21 11:39:00 | 2020-10-28 18:15:00 |
| CVE-2020-16259 | 10.0 | Winston 1.5.4 devices have an SSH user account with access from bastion hosts. This is undocumented in device documents and is not announced to the user. | 2021-07-21 11:39:00 | 2020-10-28 18:15:00 |
| CVE-2020-16257 | 10.0 | Winston 1.5.4 devices are vulnerable to command injection via the API. | 2021-07-21 11:39:00 | 2020-10-28 17:15:00 |
| CVE-2020-9982 | 4.3 | This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Apple Music 3.4.0 for Android. A malicious application may be able to leak a user's credentials. | 2021-07-21 11:39:00 | 2020-10-27 21:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: