| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-4534 | 7.2 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local authenticated attacker to gain elevated privileges on the system, caused by improper handling of UNC paths. By scheduling a task with a specially-crafted UNC path, an attacke | 2021-07-21 11:39:00 | 2020-08-03 13:15:00 |
| CVE-2020-4377 | 6.4 | IBM Cognos Anaytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: | 2021-07-21 11:39:00 | 2020-08-03 13:15:00 |
| CVE-2019-4366 | 5.0 | IBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure vulnerability where an attacker could gain access to cached browser data. IBM X-Force ID: 161748. | 2021-07-21 11:39:00 | 2020-08-03 13:15:00 |
| CVE-2020-12081 | 5.0 | An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2. The web portal link can be used to access to system files or other important files on the system. | 2021-07-21 11:39:00 | 2020-07-31 17:15:00 |
| CVE-2020-16136 | 6.8 | In tgstation-server 4.4.0 and 4.4.1, an authenticated user with permission to download logs can download any file on the server machine (accessible by the owner of the server process) via directory traversal ../ sequences in /Administration/Logs/ req | 2021-07-21 11:39:00 | 2020-07-31 16:15:00 |
| CVE-2020-9249 | 3.3 | HUAWEI P30 smartphones with versions earlier than 10.1.0.160(C00E160R2P11) have a denial of service vulnerability. A module does not deal with mal-crafted messages and it leads to memory leak. Attackers can exploit this vulnerability to make the devi | 2021-07-21 11:39:00 | 2020-07-31 13:15:00 |
| CVE-2020-9248 | 4.6 | Huawei FusionComput 8.0.0 have an improper authorization vulnerability. A module does not verify some input correctly and authorizes files with incorrect access. Attackers can exploit this vulnerability to launch privilege escalation attack. This can | 2021-07-21 11:39:00 | 2020-07-31 13:15:00 |
| CVE-2020-7205 | 7.2 | A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service Pack for ProLiant, and HPE Scripting ToolKit. The vulnerability could be locally exploited to allow arbitrary code execution during the boot process. **No | 2021-07-21 11:39:00 | 2020-07-30 18:15:00 |
| CVE-2020-15511 | 5.0 | HashiCorp Terraform Enterprise up to v202006-1 contained a default signup page that allowed user registration even when disabled, bypassing SAML enforcement. Fixed in v202007-1. | 2021-07-21 11:39:00 | 2020-07-30 14:15:00 |
| CVE-2020-14162 | 7.2 | An issue was discovered in Pi-Hole through 5.0. The local www-data user has sudo privileges to execute the pihole core script as root without a password, which could allow an attacker to obtain root access via shell metacharacters to this script's se | 2021-07-21 11:39:00 | 2020-07-30 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: