| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-5135 | 5.0 | An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management (WBM) web application on WAGO PFC100/200 controllers. The WBM application makes use of the PHP crypt() function which can be exploi | 2021-07-21 11:39:00 | 2020-03-11 22:27:00 |
| CVE-2019-5106 | 2.1 | A hard-coded encryption key vulnerability exists in the authentication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to communications between e!Cockpit and CoDeSyS Gateway can trivially recover the password of any user att | 2021-07-21 11:39:00 | 2020-03-11 22:27:00 |
| CVE-2020-8540 | 7.5 | An XML external entity (XXE) vulnerability in Zoho ManageEngine Desktop Central before the 07-Mar-2020 update allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XM | 2021-07-21 11:39:00 | 2020-03-11 17:15:00 |
| CVE-2019-9104 | 5.0 | An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. The application's configuration file contains parameters that represent passwo | 2021-07-21 11:39:00 | 2020-03-11 15:15:00 |
| CVE-2019-9102 | 6.8 | An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A predictable mechanism of generating tokens allows remote attackers to bypass | 2021-07-21 11:39:00 | 2020-03-11 15:15:00 |
| CVE-2019-9095 | 5.0 | An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An attacker may be able to intercept weakly encrypted passwords and gain admin | 2021-07-21 11:39:00 | 2020-03-11 15:15:00 |
| CVE-2020-5203 | 7.5 | In Fat-Free Framework 3.7.1, attackers can achieve arbitrary code execution if developers choose to pass user controlled input (e.g., $_REQUEST, $_GET, or $_POST) to the framework's Clear method. | 2021-07-21 11:39:00 | 2020-03-11 14:15:00 |
| CVE-2020-6208 | 4.4 | SAP Business Objects Business Intelligence Platform (Crystal Reports), versions- 4.1, 4.2, allows an attacker with basic authorization to inject code that can be executed by the application and thus allowing the attacker to control the behaviour of t | 2021-07-21 11:39:00 | 2020-03-10 21:15:00 |
| CVE-2020-6202 | 6.5 | SAP NetWeaver Application Server Java (User Management Engine), versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; does not sufficiently validate the LDAP data source configuration XML document accepted from an untrusted source, leading to Missing X | 2021-07-21 11:39:00 | 2020-03-10 21:15:00 |
| CVE-2020-6198 | 7.5 | SAP Solution Manager (Diagnostics Agent), version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check. | 2021-07-21 11:39:00 | 2020-03-10 21:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: