| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-10249 | 5.0 | BWA DiREX-Pro 1.2181 devices allow full path disclosure via an invalid name array parameter to val_soft.php3. | 2021-07-21 11:39:00 | 2020-03-09 19:15:00 |
| CVE-2020-10248 | 5.0 | BWA DiREX-Pro 1.2181 devices allow remote attackers to discover passwords via a direct request to val_users.php3. | 2021-07-21 11:39:00 | 2020-03-09 19:15:00 |
| CVE-2020-10237 | 2.1 | An issue was discovered in Froxlor through 0.10.15. The installer wrote configuration parameters including passwords into files in /tmp, setting proper permissions only after writing the sensitive data. A local attacker could have disclosed the infor | 2021-07-21 11:39:00 | 2020-03-09 16:15:00 |
| CVE-2020-10235 | 6.5 | An issue was discovered in Froxlor before 0.10.14. Remote attackers with access to the installation routine could have executed arbitrary code via the database configuration options that were passed unescaped to exec, because of _backupExistingDataba | 2021-07-21 11:39:00 | 2020-03-09 16:15:00 |
| CVE-2020-10222 | 5.8 | npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npdf!nitro::get_property+2381 via a crafted PDF document. | 2021-07-21 11:39:00 | 2020-03-08 23:15:00 |
| CVE-2020-9470 | 6.9 | An issue was discovered in Wing FTP Server 6.2.5 before February 2020. Due to insecure permissions when handling session cookies, a local user may view the contents of the session and session_admin directories, which expose active session cookies wit | 2021-07-21 11:39:00 | 2020-03-07 01:15:00 |
| CVE-2020-8439 | 4.0 | Monstra CMS through 3.0.4 allows remote authenticated users to take over arbitrary user accounts via a modified login parameter to an edit URI, as demonstrated by login=victim to the users/21/edit URI. | 2021-07-21 11:39:00 | 2020-03-07 01:15:00 |
| CVE-2020-8635 | 7.2 | Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on installation directories and configuration files. This allows local users to arbitrarily create FTP users with full privileges, and escalate privileges within the opera | 2021-07-21 11:39:00 | 2020-03-07 00:15:00 |
| CVE-2020-10193 | 5.0 | ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), | 2021-07-21 11:39:00 | 2020-03-06 20:15:00 |
| CVE-2020-9530 | 4.3 | An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. The export component of GetApps(com.xiaomi.mipicks) mishandles the functionality of opening other components. Attackers need to induce users to open specific web pages in a specific ne | 2021-07-21 11:39:00 | 2020-03-06 17:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: