| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-6864 | 3.3 | ZTE E8820V3 router product is impacted by an information leak vulnerability. Attackers could use this vulnerability to to gain wireless passwords. After obtaining the wireless password, the attacker could collect information and attack the router. | 2021-07-21 11:39:00 | 2020-02-27 17:15:00 |
| CVE-2020-6863 | 3.3 | ZTE E8820V3 router product is impacted by a permission and access control vulnerability. Attackers could use this vulnerability to tamper with DDNS parameters and send DoS attacks on the specified URL. | 2021-07-21 11:39:00 | 2020-02-27 17:15:00 |
| CVE-2020-3924 | 10.0 | DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET do not properly verify patch files. Attackers can inject a specific command into a patch file and gain access to the system. | 2021-07-21 11:39:00 | 2020-02-27 04:15:00 |
| CVE-2020-3923 | 10.0 | DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET, contain misconfigured authentication mechanism. Attackers can crack the default password and gain access to the system. | 2021-07-21 11:39:00 | 2020-02-27 04:15:00 |
| CVE-2019-19992 | 4.0 | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. A user with valid credentials is able to read XML files on the filesystem via the web interface. The PHP page /common/vam_editXml.php doesn't check the parameter that | 2021-07-21 11:39:00 | 2020-02-26 16:15:00 |
| CVE-2020-9337 | 4.0 | In GolfBuddy Course Manager 1.1, passwords are sent (with base64 encoding) via a GET request. | 2021-07-21 11:39:00 | 2020-02-26 14:15:00 |
| CVE-2020-9379 | 4.0 | The Software Development Kit of the MiContact Center Business with Site Based Security 8.0 through 9.0.1.0 before KB496276 allows an authenticated user to access sensitive information. A successful exploit could allow unauthorized access to user conv | 2021-07-21 11:39:00 | 2020-02-25 19:15:00 |
| CVE-2020-9017 | 6.0 | LiteCart through 2.2.1 allows CSV injection via a customer's profile. | 2021-07-21 11:39:00 | 2020-02-25 17:15:00 |
| CVE-2020-9382 | 5.5 | An issue was discovered in the Widgets extension through 1.4.0 for MediaWiki. Improper title sanitization allowed for the execution of any wiki page as a widget (as defined by this extension) via MediaWiki's {{#widget:}} parser function. | 2021-07-21 11:39:00 | 2020-02-24 23:15:00 |
| CVE-2020-9354 | 6.4 | An issue was discovered in SmartClient 12.0. The Remote Procedure Call (RPC) saveFile provided by the console functionality on the /tools/developerConsoleOperations.jsp (or /isomorphic/IDACall) URL allows an unauthenticated attacker to overwrite file | 2021-07-21 11:39:00 | 2020-02-23 02:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: