| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-24753 | 7.5 | A memory corruption vulnerability in Objective Open CBOR Run-time (oocborrt) in versions before 2020-08-12 could allow an attacker to execute code via crafted Concise Binary Object Representation (CBOR) input to the cbor2json decoder. An uncaught err | 2021-07-21 11:39:00 | 2020-09-17 18:15:00 |
| CVE-2020-24045 | 9.0 | A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number of tools of the operating system. The restricted shell can be bypassed by presenting a fake | 2021-07-21 11:39:00 | 2020-09-17 17:15:00 |
| CVE-2020-11804 | 6.5 | An issue was discovered in Titan SpamTitan 7.07. Due to improper sanitization of the parameter quid, used in the page mailqueue.php, code injection can occur. The input for this parameter is provided directly by an authenticated user via an HTTP GET | 2021-07-21 11:39:00 | 2020-09-17 17:15:00 |
| CVE-2020-11803 | 6.5 | An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with the page mailqueue.php could lead to PHP code evaluation server-side, because the user-provided input is passed directly to the php | 2021-07-21 11:39:00 | 2020-09-17 17:15:00 |
| CVE-2020-11700 | 4.0 | An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter fname, used on the page certs-x.php, would allow an attacker to retrieve the contents of arbitrary files. The user has to be authenticated before interacting with | 2021-07-21 11:39:00 | 2020-09-17 17:15:00 |
| CVE-2020-11699 | 9.0 | An issue was discovered in Titan SpamTitan 7.07. Improper validation of the parameter fname on the page certs-x.php would allow an attacker to execute remote code on the target server. The user has to be authenticated before interacting with this pag | 2021-07-21 11:39:00 | 2020-09-17 17:15:00 |
| CVE-2020-0407 | 2.1 | In various functions in fscrypt_ice.c and related files in some implementations of f2fs encryption that use encryption hardware which only supports 32-bit IVs (Initialization Vectors), 64-bit IVs are used and later are truncated to 32 bits. This may | 2021-07-21 11:39:00 | 2020-09-17 16:15:00 |
| CVE-2020-0399 | 4.9 | In showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not | 2021-07-21 11:39:00 | 2020-09-17 16:15:00 |
| CVE-2020-0397 | 4.9 | In getNotificationBuilder of CarrierServiceStateTracker.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed | 2021-07-21 11:39:00 | 2020-09-17 16:15:00 |
| CVE-2020-0396 | 4.9 | In various places in Telephony, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: Andr | 2021-07-21 11:39:00 | 2020-09-17 16:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: