| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-14215 | 5.0 | Zulip Server before 2.1.5 has Incorrect Access Control because 0198_preregistrationuser_invited_as adds the administrator role to invitations. | 2021-07-21 11:39:00 | 2020-08-21 05:15:00 |
| CVE-2020-14194 | 5.8 | Zulip Server before 2.1.5 allows reverse tabnapping via a topic header link. | 2021-07-21 11:39:00 | 2020-08-21 05:15:00 |
| CVE-2020-12619 | 4.3 | MailMate before 1.11 automatically imported S/MIME certificates and thereby silently replaced existing ones. This allowed a man-in-the-middle attacker to obtain an email-validated S/MIME certificate from a trusted CA and replace the public key of the | 2021-07-21 11:39:00 | 2020-08-20 23:15:00 |
| CVE-2020-12618 | 5.8 | eM Client before 7.2.33412.0 automatically imported S/MIME certificates and thereby silently replaced existing ones. This allowed a man-in-the-middle attacker to obtain an email-validated S/MIME certificate from a trusted CA and replace the public ke | 2021-07-21 11:39:00 | 2020-08-20 23:15:00 |
| CVE-2020-4687 | 4.0 | IBM Content Navigator 3.0.7 and 3.0.8 could allow an authenticated user to view cached content of another user that they should not have access to. IBM X-Force ID: 186679. | 2021-07-21 11:39:00 | 2020-08-20 16:15:00 |
| CVE-2020-16279 | 7.5 | The Kommbox component in Rangee GmbH RangeeOS 8.0.4 is vulnerable to Remote Code Execution due to untrusted user supplied input being passed to the command line without sanitization. | 2021-07-21 11:39:00 | 2020-08-20 16:15:00 |
| CVE-2019-20150 | 4.0 | In TreasuryXpress 19191105, a logged-in user can discover saved credentials, even though the UI hides them. Using functionality within the application and a malicious host, it is possible to force the application to expose saved SSH/SFTP credentials. | 2021-07-21 11:39:00 | 2020-08-20 13:15:00 |
| CVE-2020-13826 | 6.8 | A CSV injection (aka Excel Macro Injection or Formula Injection) issue in i-doit 1.14.2 allows an attacker to execute arbitrary commands via a Title parameter that is mishandled in a CSV export. | 2021-07-21 11:39:00 | 2020-08-20 01:17:00 |
| CVE-2020-23574 | 4.0 | When uploading a file in Sysax Multi Server 6.90, an authenticated user can modify the filename="" parameter in the uploadfile_name1.htm form to a length of 368 or more bytes. This will create a buffer overflow condition, causing the application to c | 2021-07-21 11:39:00 | 2020-08-19 16:15:00 |
| CVE-2020-9724 | 6.8 | Adobe Lightroom versions 9.2.0.10 and earlier have an insecure library loading vulnerability. Successful exploitation could lead to privilege escalation. | 2021-07-21 11:39:00 | 2020-08-19 15:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: