| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-8087 | 10.0 | SMC Networks D3G0804W D3GNV5M-3.5.1.6.10_GA devices allow remote command execution by leveraging access to the Network Diagnostic Tools screen, as demonstrated by an admin login. The attacker must use a Parameter Pollution approach against goform/for | 2021-07-21 11:39:00 | 2020-01-27 20:15:00 |
| CVE-2020-7951 | 6.8 | meshsystem.dll in Valve Dota 2 before 7.23e allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted map is affected by memory corruption. | 2021-07-21 11:39:00 | 2020-01-27 17:15:00 |
| CVE-2019-20430 | 7.8 | In the Lustre file system before 2.12.3, the mdt module has an LBUG panic (via a large MDT Body eadatasize field) due to the lack of validation for specific fields of packets sent by a client. | 2021-07-21 11:39:00 | 2020-01-27 05:15:00 |
| CVE-2020-7596 | 6.5 | Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the "gcov-args" argument. | 2021-07-21 11:39:00 | 2020-01-25 19:15:00 |
| CVE-2020-7964 | 5.0 | An issue was discovered in Mirumee Saleor 2.x before 2.9.1. Incorrect access control in the checkoutCustomerAttach mutations allows attackers to attach their checkouts to any user ID and consequently leak user data (e.g., name, address, and previous | 2021-07-21 11:39:00 | 2020-01-24 20:15:00 |
| CVE-2020-7052 | 4.0 | CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition. | 2021-07-21 11:39:00 | 2020-01-24 20:15:00 |
| CVE-2020-7941 | 7.5 | A privilege escalation issue in plone.app.contenttypes in Plone 4.3 through 5.2.1 allows users to PUT (overwrite) some content without needing write permission. | 2021-07-21 11:39:00 | 2020-01-23 21:15:00 |
| CVE-2020-7938 | 6.5 | plone.restapi in Plone 5.2.0 through 5.2.1 allows users with a certain privilege level to escalate their privileges up to the highest level. | 2021-07-21 11:39:00 | 2020-01-23 21:15:00 |
| CVE-2019-19898 | 5.0 | In IXP EasyInstall 6.2.13723, there are cleartext credentials in network communication on TCP port 20050 when using the Administrator console remotely. | 2021-07-21 11:39:00 | 2020-01-23 21:15:00 |
| CVE-2019-19895 | 4.6 | In IXP EasyInstall 6.2.13723, there is Lateral Movement (using the Agent Service) against other users on a client system. An authenticated attacker can, by modifying %SYSTEMDRIVE%\IXP\SW\[PACKAGE_CODE]\EveryLogon.bat, achieve this movement and execut | 2021-07-21 11:39:00 | 2020-01-23 21:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: