| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-15666 | 4.3 | When trying to load a non-video in an audio/video context the exact status code (200, 302, 404, 500, 412, 403, etc.) was disclosed via the MediaError Message. This level of information leakage is inconsistent with the standardized onerror/onsuccess d | 2021-07-21 11:39:00 | 2020-10-01 19:15:00 |
| CVE-2020-25781 | 4.0 | An issue was discovered in file_download.php in MantisBT before 2.24.3. Users without access to view private issue notes are able to download the (supposedly private) attachments linked to these notes by accessing the corresponding file download URL | 2021-07-21 11:39:00 | 2020-09-30 21:15:00 |
| CVE-2020-26160 | 5.0 | jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m["aud"] (which is allowed by the specification). Because the type assertion fails, "" is the value of aud. This is a security prob | 2021-07-21 11:39:00 | 2020-09-30 18:15:00 |
| CVE-2020-26150 | 5.0 | info.php in Logaritmo Aware CallManager 2012 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function. | 2021-07-21 11:39:00 | 2020-09-30 18:15:00 |
| CVE-2020-24570 | 4.3 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a CSRF issue (with resultant SSRF) in the com_mb24proxy module, allowing attackers to steal session information from logged-in users with a crafted link. | 2021-07-21 11:39:00 | 2020-09-30 18:15:00 |
| CVE-2020-19676 | 5.0 | Nacos 1.1.4 is affected by: Incorrect Access Control. An environment can be set up locally to get the service details interface. Then other Nacos service names can be accessed through the service list interface. Service details can then be accessed w | 2021-07-21 11:39:00 | 2020-09-30 18:15:00 |
| CVE-2020-13794 | 4.0 | Harbor 1.9.* 1.10.* and 2.0.* allows Exposure of Sensitive Information to an Unauthorized Actor. | 2021-07-21 11:39:00 | 2020-09-30 18:15:00 |
| CVE-2020-13323 | 4.3 | A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be read via Todos | 2021-07-21 11:39:00 | 2020-09-30 18:15:00 |
| CVE-2020-13320 | 4.0 | An issue has been discovered in GitLab before version 12.10.13 that allowed a project member with limited permissions to view the project security dashboard. | 2021-07-21 11:39:00 | 2020-09-30 18:15:00 |
| CVE-2019-20922 | 7.8 | Handlebars before 4.4.5 allows Regular Expression Denial of Service (ReDoS) because of eager matching. The parser may be forced into an endless loop while processing crafted templates. This may allow attackers to exhaust system resources. | 2021-07-21 11:39:00 | 2020-09-30 18:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: