Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2020-10120 9.0 cPanel before 84.0.20 allows resellers to achieve remote code execution as root via a cpsrvd rsync shell (SEC-545). 2021-07-21 11:39:00
CVE-2020-10117 6.4 cPanel before 84.0.20 mishandles enforcement of demo checks in the Market UAPI namespace (SEC-542). 2021-07-21 11:39:00
CVE-2020-10116 5.0 cPanel before 84.0.20 allows attackers to bypass intended restrictions on features and demo accounts via WebDisk UAPI calls (SEC-541). 2021-07-21 11:39:00
CVE-2020-10115 9.0 cPanel before 84.0.20, when PowerDNS is used, allows arbitrary code execution as root via dnsadmin. (SEC-537). 2021-07-21 11:39:00
CVE-2019-20495 4.0 cPanel before 82.0.18 allows attackers to read an arbitrary database via MySQL dump streaming (SEC-531). 2021-07-21 11:39:00
CVE-2019-20494 2.1 In cPanel before 82.0.18, Cpanel::Rand::Get can produce a predictable series of numbers (SEC-525). 2021-07-21 11:39:00
CVE-2019-19937 6.5 In JFrog Artifactory before 6.18, it is not possible to restrict either system or repository imports by any admin user in the enterprise, which can lead to "undesirable results." 2021-07-21 11:39:00
CVE-2020-3948 4.6 Linux Guest VMs running on VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a local privilege escalation vulnerability due to improper file permissions in Cortado Thinprint. Local attackers with non-administrative acces 2021-07-21 11:39:00
CVE-2019-19946 4.0 The API in Dradis Pro 3.4.1 allows any user to extract the content of a project, even if this user is not part of the project team. 2021-07-21 11:39:00
CVE-2020-10239 6.5 An issue was discovered in Joomla! before 3.9.16. Incorrect Access Control in the SQL fieldtype of com_fields allows access for non-superadmin users. 2021-07-21 11:39:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/39518
Zapisa po stranici: