| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-5728 | 4.3 | OpenMRS 2.9 and prior copies "Referrer" header values into an html element named "redirectUrl" within many webpages (such as login.htm). There is insufficient validation for this parameter, which allows for the possibility of cross-site scripting. | 2021-07-21 11:39:00 | 2020-04-17 19:15:00 |
| CVE-2020-11883 | 5.0 | In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names. | 2021-07-21 11:39:00 | 2020-04-17 19:15:00 |
| CVE-2020-0080 | 9.3 | In onOpActiveChanged and related methods of AppOpsControllerImpl.java, there is a possible way to display an app overlaying other apps without the notification icon that it's overlaying. This could lead to local escalation of privilege with User exec | 2021-07-21 11:39:00 | 2020-04-17 19:15:00 |
| CVE-2020-0068 | 2.1 | In crus_afe_get_param of msm-cirrus-playback.c, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitatio | 2021-07-21 11:39:00 | 2020-04-17 19:15:00 |
| CVE-2019-2056 | 4.9 | There is a possible disclosure of RAM using a shared crypto key due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: An | 2021-07-21 11:39:00 | 2020-04-17 19:15:00 |
| CVE-2019-6203 | 7.5 | A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2. An attacker in a privileged network position may be able to intercept network traffic. | 2021-07-21 11:39:00 | 2020-04-17 18:15:00 |
| CVE-2020-4277 | 5.0 | IBM TRIRIGA Application Platform 3.5.3 and 3.6.1 discloses sensitive information in error messages that could aid an attacker formulate future attacks. IBM X-Force ID: 175993. | 2021-07-21 11:39:00 | 2020-04-17 14:15:00 |
| CVE-2019-4446 | 5.5 | IBM Maximo Asset Management 7.6 could allow an authenticated user perform actions they are not authorized to by modifying request parameters. IBM X-Force ID: 163490. | 2021-07-21 11:39:00 | 2020-04-17 14:15:00 |
| CVE-2019-20783 | 6.4 | An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 (North America CDMA) software. The LTE protocol implementation allows a bypass of AKA (Authentication and Key Agreement). The LG ID is LVE-SMP-180014 (February 2 | 2021-07-21 11:39:00 | 2020-04-17 14:15:00 |
| CVE-2019-20780 | 7.5 | An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. Certain security settings, related to whether packages are verified and accepted only from known sources, are mishandled. The LG ID is LVE-SMP-190002 ( | 2021-07-21 11:39:00 | 2020-04-17 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: