| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-20026 | 5.0 | The WebPro interface in NEC SV9100 software releases 7.0 or higher allows unauthenticated remote attackers to reset all existing usernames and passwords to default values via a crafted request. | 2021-07-21 11:39:00 | 2020-07-29 18:15:00 |
| CVE-2020-13699 | 6.8 | TeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious website could launch TeamViewer with arbitrary parameters, as demonstrated by a teamviewer10: --play URL. An attacker could force a victim to se | 2021-07-21 11:39:00 | 2020-07-29 16:15:00 |
| CVE-2020-4644 | 5.8 | IBM Planning Analytics Local 2.0.0 through 2.0.9.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victi | 2021-07-21 11:39:00 | 2020-07-29 14:15:00 |
| CVE-2020-4573 | 5.0 | IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 could disclose sensitive information due to responding to unauthenticated HTTP requests. IBM X-Force ID: 184180. | 2021-07-21 11:39:00 | 2020-07-29 14:15:00 |
| CVE-2020-4572 | 5.0 | IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM | 2021-07-21 11:39:00 | 2020-07-29 14:15:00 |
| CVE-2020-4567 | 5.0 | IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 184156. | 2021-07-21 11:39:00 | 2020-07-29 14:15:00 |
| CVE-2020-2076 | 7.5 | SICK Package Analytics software up to and including version V04.0.0 are vulnerable to an authentication bypass by directly interfacing with the REST API. An attacker can send unauthorized requests, bypass current authentication controls presented by | 2021-07-21 11:39:00 | 2020-07-29 14:15:00 |
| CVE-2020-9692 | 8.5 | Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution. | 2021-07-21 11:39:00 | 2020-07-29 13:15:00 |
| CVE-2020-7698 | 7.5 | This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sanitized. | 2021-07-21 11:39:00 | 2020-07-29 13:15:00 |
| CVE-2020-7697 | 7.5 | This affects all versions of package mock2easy. a malicious user could inject commands through the _data variable: Affected Area require('../server/getJsonByCurl')(mock2easy, function (error, stdout) { if (error) { return res.json(500, error); } res. | 2021-07-21 11:39:00 | 2020-07-29 13:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: