| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-12620 | 7.2 | Pi-hole 4.4 allows a user able to write to /etc/pihole/dns-servers.conf to escalate privileges through command injection (shell metacharacters after an IP address). | 2021-07-21 11:39:00 | 2020-07-30 14:15:00 |
| CVE-2020-3698 | 7.5 | Out of bound write while QoS DSCP mapping due to improper input validation for data received from association response frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Ind | 2021-07-21 11:39:00 | 2020-07-30 12:15:00 |
| CVE-2019-14130 | 4.6 | Memory corruption can occurs in trusted application if offset size from HLOS is more than actual mapped buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, QCS404, Rennell, | 2021-07-21 11:39:00 | 2020-07-30 12:15:00 |
| CVE-2019-14123 | 4.6 | Possible buffer overflow and over read possible due to missing bounds checks for fixed limits if we consider widevine HLOS client as non-trustable in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networki | 2021-07-21 11:39:00 | 2020-07-30 12:15:00 |
| CVE-2019-14100 | 4.6 | Register write via debugfs is disabled by default to prevent register writing via debugfs. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9207C, M | 2021-07-21 11:39:00 | 2020-07-30 12:15:00 |
| CVE-2020-5610 | 9.3 | Global TechStream (GTS) for TOYOTA dealers version 15.10.032 and earlier allows an attacker to cause a denial-of-service (DoS) condition and execute arbitrary code via unspecified vectors. | 2021-07-21 11:39:00 | 2020-07-30 09:15:00 |
| CVE-2020-14316 | 6.5 | A flaw was found in kubevirt 0.29 and earlier. Virtual Machine Instances (VMIs) can be used to gain access to the host's filesystem. Successful exploitation allows an attacker to assume the privileges of the VM process on the host system. In worst-ca | 2021-07-21 11:39:00 | 2020-07-29 19:15:00 |
| CVE-2019-20033 | 7.5 | On Aspire-derived NEC PBXes, including all versions of SV8100 devices, a set of documented, static login credentials may be used to access the DIM interface. | 2021-07-21 11:39:00 | 2020-07-29 18:15:00 |
| CVE-2019-20029 | 6.5 | An exploitable privilege escalation vulnerability exists in the WebPro functionality of Aspire-derived NEC PBXes, including all versions of SV8100, SV9100, SL1100 and SL2100 devices. A specially crafted HTTP POST can cause privilege escalation result | 2021-07-21 11:39:00 | 2020-07-29 18:15:00 |
| CVE-2019-20028 | 5.0 | Aspire-derived NEC PBXes operating InMail software, including all versions of SV8100, SV9100, SL1100 and SL2100 devices allow unauthenticated read-only access to voicemails, greetings, and voice response system content through a system's WebPro admin | 2021-07-21 11:39:00 | 2020-07-29 18:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: