| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-11470 | 2.1 | Zoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to obtain unprompted microphone and camera access by loading a crafted library and thereby inher | 2021-07-21 11:39:00 | 2020-04-01 22:15:00 |
| CVE-2020-11467 | 6.5 | An issue was discovered in Deskpro before 2019.8.0. This product enables administrators to modify the helpdesk interface by editing /portal/api/style/edit-theme-set/template-sources theme templates, and uses TWIG as its template engine. While direct | 2021-07-21 11:39:00 | 2020-04-01 21:15:00 |
| CVE-2020-11466 | 4.0 | An issue was discovered in Deskpro before 2019.8.0. The /api/tickets endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve arbitrary information about all helpdesk tickets stored in database with numerous filters. | 2021-07-21 11:39:00 | 2020-04-01 21:15:00 |
| CVE-2020-11465 | 6.5 | An issue was discovered in Deskpro before 2019.8.0. The /api/apps/* endpoints failed to properly validate a user's privilege, allowing an attacker to control/install helpdesk applications and leak current applications' configurations, including appli | 2021-07-21 11:39:00 | 2020-04-01 21:15:00 |
| CVE-2020-11464 | 4.0 | An issue was discovered in Deskpro before 2019.8.0. The /api/people endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve sensitive information about all users registered on the system. This includes their full nam | 2021-07-21 11:39:00 | 2020-04-01 21:15:00 |
| CVE-2020-11463 | 5.0 | An issue was discovered in Deskpro before 2019.8.0. The /api/email_accounts endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve cleartext credentials of all helpdesk email accounts, including incoming and outgoin | 2021-07-21 11:39:00 | 2020-04-01 21:15:00 |
| CVE-2020-10948 | 10.0 | Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) 2.0.2 is vulnerable to Remote Command Execution via eval injection, a different issue than CVE-2002-0934. An unauthenticated, remote attacker can exploit this via a series of craf | 2021-07-21 11:39:00 | 2020-04-01 21:15:00 |
| CVE-2020-3850 | 7.5 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arbitrary code execution. | 2021-07-21 11:39:00 | 2020-04-01 19:15:00 |
| CVE-2020-3849 | 7.5 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arbitrary code execution. | 2021-07-21 11:39:00 | 2020-04-01 19:15:00 |
| CVE-2020-3848 | 7.5 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arbitrary code execution. | 2021-07-21 11:39:00 | 2020-04-01 19:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: