| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-6227 | 5.0 | SAP Business Objects Business Intelligence Platform (CMS / Auditing issues), version 4.2, allows attacker to send specially crafted GIOP packets to several services due to Improper Input Validation, allowing to forge additional entries in GLF log fil | 2021-07-21 11:39:00 | 2020-04-14 19:15:00 |
| CVE-2020-6224 | 3.5 | SAP NetWeaver AS Java (HTTP Service), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker with administrator privileges to access user sensitive data such as passwords in trace files, when the user logs in and sends request with log | 2021-07-21 11:39:00 | 2020-04-14 19:15:00 |
| CVE-2020-7958 | 2.1 | An issue was discovered on OnePlus 7 Pro devices before 10.0.3.GM21BA. The firmware was found to contain functionality that allows a privileged user (root) in the Rich Execution Environment (REE) to obtain bitmap images from the fingerprint sensor be | 2021-07-21 11:39:00 | 2020-04-14 16:15:00 |
| CVE-2020-4151 | 4.0 | IBM QRadar SIEM 7.3.0 through 7.3.3 could allow an authenticated attacker to perform unauthorized actions due to improper input validation. IBM X-Force ID: 174201. | 2021-07-21 11:39:00 | 2020-04-14 15:15:00 |
| CVE-2020-11673 | 7.5 | An issue was discovered in the Responsive Poll through 1.3.4 for Wordpress. It allows an unauthenticated user to manipulate polls, e.g., delete, clone, or view a hidden poll. This is due to the usage of the callback wp_ajax_nopriv function in Include | 2021-07-21 11:39:00 | 2020-04-13 15:15:00 |
| CVE-2020-11707 | 6.5 | An issue was discovered in ProVide (formerly zFTPServer) through 13.1. It doesn't enforce permission over Windows Symlinks or Junctions. As a result, a low-privileged user (non-admin) can craft a Junction Link in a directory he has full control of, b | 2021-07-21 11:39:00 | 2020-04-12 03:15:00 |
| CVE-2020-1801 | 4.3 | There is an improper authentication vulnerability in several smartphones. Certain function interface in the system does not sufficiently validate the caller's identity in certain share scenario, successful exploit could cause information disclosure. | 2021-07-21 11:39:00 | 2020-04-10 15:15:00 |
| CVE-2020-4362 | 6.5 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege escalation vulnerability when using token-based authentication in an admin request over the SOAP connector. IBM X-Force ID: 178929. | 2021-07-21 11:39:00 | 2020-04-10 14:15:00 |
| CVE-2019-18376 | 4.3 | A CSRF token disclosure vulnerability allows a remote attacker, with access to an authenticated Management Center (MC) user's web browser history or a network device that intercepts/logs traffic to MC, to obtain CSRF tokens and use them to perform CS | 2021-07-21 11:39:00 | 2020-04-10 00:15:00 |
| CVE-2020-8961 | 7.5 | An issue was discovered in Avira Free-Antivirus before 15.0.2004.1825. The Self-Protection feature does not prohibit a write operation from an external process. Thus, code injection can be used to turn off this feature. After that, one can construct | 2021-07-21 11:39:00 | 2020-04-09 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: