| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-5185 | 4.4 | An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. An attacker can send a specially crafted packet to trigger the parsing of this cache file. At 0x1ea28 the extra | 2021-07-21 11:39:00 | 2020-03-23 14:15:00 |
| CVE-2020-10807 | 5.0 | auth_svc in Caldera before 2.6.5 allows authentication bypass (for REST API requests) via a forged "localhost" string in the HTTP Host header. | 2021-07-21 11:39:00 | 2020-03-22 16:15:00 |
| CVE-2020-10800 | 6.8 | lix through 15.8.7 allows man-in-the-middle attackers to execute arbitrary code by modifying the HTTP client-server data stream so that the Location header is associated with attacker-controlled executable content in the postDownload field. | 2021-07-21 11:39:00 | 2020-03-21 15:15:00 |
| CVE-2020-10194 | 4.0 | cs/service/account/AutoCompleteGal.java in Zimbra zm-mailbox before 8.8.15.p8 allows authenticated users to request any GAL account. This differs from the intended behavior in which the domain of the authenticated user must match the domain of the ga | 2021-07-21 11:39:00 | 2020-03-20 21:15:00 |
| CVE-2019-16528 | 5.0 | An issue was discovered in the AbuseFilter extension for MediaWiki. includes/special/SpecialAbuseLog.php allows attackers to obtain sensitive information, such as deleted/suppressed usernames and summaries, from AbuseLog revision data. This affects R | 2021-07-21 11:39:00 | 2020-03-20 21:15:00 |
| CVE-2020-9425 | 5.0 | An issue was discovered in includes/head.inc.php in rConfig before 3.9.4. An unauthenticated attacker can retrieve saved cleartext credentials via a GET request to settings.php. Because the application was not exiting after a redirect is applied, the | 2021-07-21 11:39:00 | 2020-03-20 18:15:00 |
| CVE-2019-15075 | 5.0 | An issue was discovered in iNextrix ASTPP before 4.0.1. web_interface/astpp/application/config/config.php does not have strong random keys, as demonstrated by use of the 8YSDaBtDHAB3EQkxPAyTz2I5DttzA9uR private key and the r)fddEw232f encryption key. | 2021-07-21 11:39:00 | 2020-03-20 18:15:00 |
| CVE-2020-9343 | 4.3 | An issue was discovered in signotec signoPAD-API/Web (formerly Websocket Pad Server) before 3.1.1 on Windows. It is possible to perform a Denial of Service attack because the implementation doesn't limit the parsing of nested JSON structures. If a vi | 2021-07-21 11:39:00 | 2020-03-20 03:15:00 |
| CVE-2019-16063 | 5.0 | NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data rendered within web pages. It is possible for an attacker to expose unencrypted sensitive data. | 2021-07-21 11:39:00 | 2020-03-19 23:15:00 |
| CVE-2019-16067 | 5.0 | NETSAS Enigma NMS 65.0.0 and prior utilises basic authentication over HTTP for enforcing access control to the web application. The use of weak authentication transmitted over cleartext protocols can allow an attacker to steal username and password c | 2021-07-21 11:39:00 | 2020-03-19 18:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: