| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-4656 | 4.0 | IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD is vulnerable to a denial of service attack that would allow an authenticated user to crash the queue and require a restart due to an error processing error messages. IBM X-Force | 2021-07-21 11:39:00 | 2020-03-16 16:15:00 |
| CVE-2019-19135 | 5.8 | In OPC Foundation OPC UA .NET Standard codebase 1.4.357.28, servers do not create sufficiently random numbers in OPCFoundation.NetStandard.Opc.Ua before 1.4.359.31, which allows man in the middle attackers to reuse encrypted user credentials sent ove | 2021-07-21 11:39:00 | 2020-03-16 16:15:00 |
| CVE-2020-5547 | 7.5 | Resource Management Errors vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to stop the network functions or execute malware via a sp | 2021-07-21 11:39:00 | 2020-03-16 02:15:00 |
| CVE-2019-6696 | 5.8 | An improper input validation vulnerability in FortiOS 6.2.1, 6.2.0, 6.0.8 and below until 5.4.0 under admin webUI may allow an attacker to perform an URL redirect attack via a specifically crafted request to the admin initial password change webpage. | 2021-07-21 11:39:00 | 2020-03-15 23:15:00 |
| CVE-2020-7607 | 7.5 | gulp-styledocco through 0.0.3 allows execution of arbitrary commands. The argument 'options' of the exports function in 'index.js' can be controlled by users without any sanitization. | 2021-07-21 11:39:00 | 2020-03-15 22:15:00 |
| CVE-2020-7606 | 7.5 | docker-compose-remote-api through 0.1.4 allows execution of arbitrary commands. Within 'index.js' of the package, the function 'exec(serviceName, cmd, fnStdout, fnStderr, fnExit)' uses the variable 'serviceName' which can be controlled by users witho | 2021-07-21 11:39:00 | 2020-03-15 22:15:00 |
| CVE-2020-7605 | 7.5 | gulp-tape through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of 'gulp-tape' options. | 2021-07-21 11:39:00 | 2020-03-15 22:15:00 |
| CVE-2020-7604 | 7.5 | pulverizr through 0.7.0 allows execution of arbitrary commands. Within "lib/job.js", the variable "filename" can be controlled by the attacker. This function uses the variable "filename" to construct the argument of the exec call without any sanitiza | 2021-07-21 11:39:00 | 2020-03-15 22:15:00 |
| CVE-2020-7603 | 7.5 | closure-compiler-stream through 0.1.15 allows execution of arbitrary commands. The argument "options" of the exports function in "index.js" can be controlled by users without any sanitization. | 2021-07-21 11:39:00 | 2020-03-15 22:15:00 |
| CVE-2020-7602 | 7.5 | node-prompt-here through 1.0.1 allows execution of arbitrary commands. The "runCommand()" is called by "getDevices()" function in file "linux/manager.js", which is required by the "index. process.env.NM_CLI" in the file "linux/manager.js". This funct | 2021-07-21 11:39:00 | 2020-03-15 22:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: