| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-8517 | 5.0 | An issue was discovered in Squid before 4.10. Due to incorrect input validation, the NTLM authentication credentials parser in ext_lm_group_acl may write to memory outside the credentials buffer. On systems with memory access protections, this can re | 2021-07-21 11:39:00 | 2020-02-04 20:15:00 |
| CVE-2020-7221 | 7.2 | mysql_install_db in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown and chmod are performed unsafely, as demonstrated by a symlink attack on a chmod 04755 of auth_pam_tool_dir/auth_pam_tool | 2021-07-21 11:39:00 | 2020-02-04 17:15:00 |
| CVE-2020-4163 | 6.0 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, under specialized conditions, could allow an authenticated user to create a maliciously crafted file name which would be misinterpreted as jsp content and executed. IBM X-Force ID: 174397. | 2021-07-21 11:39:00 | 2020-02-04 17:15:00 |
| CVE-2019-4541 | 6.5 | IBM Security Directory Server 6.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 165814. | 2021-07-21 11:39:00 | 2020-02-04 17:15:00 |
| CVE-2020-5182 | 4.3 | The J-BusinessDirectory extension before 5.2.9 for Joomla! allows Reverse Tabnabbing. In some configurations, the link to the business website can be entered by any user. If it doesn't contain rel="noopener" (or similar attributes such as noreferrer) | 2021-07-21 11:39:00 | 2020-02-03 17:15:00 |
| CVE-2020-4224 | 2.1 | IBM StoredIQ 7.6.0.17 through 7.6.0.20 could disclose sensitive information to a local user due to data in certain directories not being encrypted when it contained symbolic links. IBM X-Force ID: 175133. | 2021-07-21 11:39:00 | 2020-02-03 17:15:00 |
| CVE-2019-16893 | 7.8 | The Web Management of TP-Link TP-SG105E V4 1.0.0 Build 20181120 devices allows an unauthenticated attacker to reboot the device via a reboot.cgi request. | 2021-07-21 11:39:00 | 2020-02-03 17:15:00 |
| CVE-2020-8547 | 7.5 | phpList 3.5.0 allows type juggling for admin login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters. | 2021-07-21 11:39:00 | 2020-02-03 16:15:00 |
| CVE-2019-19119 | 2.1 | An issue was discovered in PRTG 7.x through 19.4.53. Due to insufficient access control on local registry keys for the Core Server Service, a non-administrative user on the local machine is able to access administrative credentials. | 2021-07-21 11:39:00 | 2020-02-03 15:15:00 |
| CVE-2020-7955 | 5.0 | HashiCorp Consul and Consul Enterprise 1.4.1 through 1.6.2 did not uniformly enforce ACLs across all API endpoints, resulting in potential unintended information disclosure. Fixed in 1.6.3. | 2021-07-21 11:39:00 | 2020-01-31 13:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: