| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-4498 | 2.1 | IBM MQ Appliance 9.1 LTS and 9.1 CD could allow a local privileged user to obtain highly sensitve information due to inclusion of data within trace files. IBM X-Force ID: 182118. | 2021-07-21 11:39:00 | 2020-07-27 14:15:00 |
| CVE-2020-15593 | 7.2 | SteelCentral Aternity Agent 11.0.0.120 on Windows mishandles IPC. It uses an executable running as a high privileged Windows service to perform administrative tasks and collect data from other processes. It distributes functionality among different p | 2021-07-21 11:39:00 | 2020-07-27 14:15:00 |
| CVE-2020-9251 | 2.1 | HUAWEI Mate 20 smartphones with versions earlier than 10.1.0.160(C00E160R2P11) have an improper authorization vulnerability. The software does not properly restrict certain operation in certain scenario, the attacker should do certain configuration b | 2021-07-21 11:39:00 | 2020-07-27 13:15:00 |
| CVE-2020-9077 | 4.3 | HUAWEI P30 smart phones with versions earlier than 10.1.0.160(C00E160R2P11) have an information exposure vulnerability. The system does not properly authenticate the application that access a specified interface. Attackers can trick users into instal | 2021-07-21 11:39:00 | 2020-07-27 13:15:00 |
| CVE-2020-7694 | 5.0 | This affects all versions of package uvicorn. The request logger provided by the package is vulnerable to ASNI escape sequence injection. Whenever any HTTP request is received, the default behaviour of uvicorn is to log its details to either the cons | 2021-07-21 11:39:00 | 2020-07-27 12:15:00 |
| CVE-2020-15477 | 10.0 | The WebControl in RaspberryTortoise through 2012-10-28 is vulnerable to remote code execution via shell metacharacters in a URI. The file nodejs/raspberryTortoise.js has no validation on the parameter incomingString before passing it to the child_pro | 2021-07-21 11:39:00 | 2020-07-23 20:15:00 |
| CVE-2020-15391 | 7.5 | The UI in DevSpace 4.13.0 allows web sites to execute actions on pods (on behalf of a victim) because of a lack of authentication for the WebSocket protocol. This leads to remote code execution. | 2021-07-21 11:39:00 | 2020-07-23 20:15:00 |
| CVE-2020-12638 | 4.3 | An encryption-bypass issue was discovered on Espressif ESP-IDF devices through 4.2, ESP8266_NONOS_SDK devices through 3.0.3, and ESP8266_RTOS_SDK devices through 3.3. Broadcasting forged beacon frames forces a device to change its authentication mode | 2021-07-21 11:39:00 | 2020-07-23 16:15:00 |
| CVE-2020-11440 | 5.0 | httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root. | 2021-07-21 11:39:00 | 2020-07-23 14:15:00 |
| CVE-2020-4400 | 5.0 | IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 179478. | 2021-07-21 11:39:00 | 2020-07-22 21:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: