| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-14201 | 4.0 | Dolibarr CRM before 11.0.5 allows privilege escalation. This could allow remote authenticated attackers to upload arbitrary files via societe/document.php in which "disabled" is changed to "enabled" in the HTML source code. | 2021-07-21 11:39:00 | 2020-08-21 19:15:00 |
| CVE-2019-11862 | 4.6 | The SSH service on ALEOS before 4.12.0, 4.9.5, 4.4.9 allows traffic proxying. | 2021-07-21 11:39:00 | 2020-08-21 19:15:00 |
| CVE-2020-24056 | 5.0 | A hardcoded credentials vulnerability exists in Verint 5620PTZ Verint_FW_0_42, Verint 4320 V4320_FW_0_23, V4320_FW_0_31, and Verint S5120FD Verint_FW_0_42units. This could cause a confidentiality issue when using the FTP, Telnet, or SSH protocols. | 2021-07-21 11:39:00 | 2020-08-21 15:15:00 |
| CVE-2020-24053 | 5.0 | Moog EXO Series EXVF5C-2 and EXVP7C2-3 units have a hardcoded credentials vulnerability. This could cause a confidentiality issue when using the FTP, Telnet, or SSH protocols. | 2021-07-21 11:39:00 | 2020-08-21 15:15:00 |
| CVE-2020-24052 | 6.4 | Several XML External Entity (XXE) vulnerabilities in the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units allow remote unauthenticated users to read arbitrary files via a crafted Document Type Definition (DTD) in an XML request. | 2021-07-21 11:39:00 | 2020-08-21 15:15:00 |
| CVE-2020-24051 | 10.0 | The Moog EXO Series EXVF5C-2 and EXVP7C2-3 units support the ONVIF interoperability IP-based physical security protocol, which requires authentication for some of its operations. It was found that the authentication check for those ONVIF operations c | 2021-07-21 11:39:00 | 2020-08-21 15:15:00 |
| CVE-2020-9246 | 4.0 | FusionCompute 8.0.0 has an information leak vulnerability. A module does not launch strict access control and information protection. Attackers with low privilege can get some extra information. This can lead to information leak. | 2021-07-21 11:39:00 | 2020-08-21 14:15:00 |
| CVE-2020-12457 | 5.0 | An issue was discovered in wolfSSL before 4.5.0. It mishandles the change_cipher_spec (CCS) message processing logic for TLS 1.3. If an attacker sends ChangeCipherSpec messages in a crafted way involving more than one in a row, the server becomes stu | 2021-07-21 11:39:00 | 2020-08-21 14:15:00 |
| CVE-2020-7710 | 7.5 | This affects all versions of package safe-eval. It is possible for an attacker to run an arbitrary command on the host machine. | 2021-07-21 11:39:00 | 2020-08-21 10:15:00 |
| CVE-2020-15070 | 6.5 | Zulip Server 2.x before 2.1.7 allows eval injection if a privileged attacker were able to write directly to the postgres database, and chose to write a crafted custom profile field value. | 2021-07-21 11:39:00 | 2020-08-21 05:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: