| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-16954 | 4.9 | SolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket. | 2021-07-21 11:39:00 | 2021-01-06 17:15:00 |
| CVE-2020-36176 | 5.0 | The iThemes Security (formerly Better WP Security) plugin before 7.7.0 for WordPress does not enforce a new-password requirement for an existing account until the second login occurs. | 2021-07-21 11:39:00 | 2021-01-06 15:15:00 |
| CVE-2020-36175 | 5.0 | The Ninja Forms plugin before 3.4.27.1 for WordPress allows attackers to bypass validation via the email field. | 2021-07-21 11:39:00 | 2021-01-06 15:15:00 |
| CVE-2020-36173 | 5.0 | The Ninja Forms plugin before 3.4.28 for WordPress lacks escaping for submissions-table fields. | 2021-07-21 11:39:00 | 2021-01-06 15:15:00 |
| CVE-2019-20484 | 5.5 | An issue was discovered in Viki Vera 4.9.1.26180. A user without access to a project could download or upload project files by opening the Project URL directly in the browser after logging in. | 2021-07-21 11:39:00 | 2021-01-05 22:15:00 |
| CVE-2020-7202 | 5.0 | A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4) firmware. The vulnerability could be remotely exploited to disclose the serial number and other information. | 2021-07-21 11:39:00 | 2021-01-05 15:15:00 |
| CVE-2020-36157 | 7.5 | An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Roles. Due to the lack of filtering on the role parameter that could be supplied during the registration process, an | 2021-07-21 11:39:00 | 2021-01-04 18:15:00 |
| CVE-2020-35219 | 10.0 | The ASUS DSL-N17U modem with firmware 1.1.0.2 allows attackers to access the admin interface by changing the admin password without authentication via a POST request to Advanced_System_Content.asp with the uiViewTools_username=admin&uiViewTools_Passw | 2021-07-21 11:39:00 | 2021-01-04 18:15:00 |
| CVE-2020-4919 | 5.5 | IBM Cloud Pak System 2.3 has insufficient logout controls which could allow an authenticated privileged user to impersonate another user on the system. IBM X-Force ID: 191395. | 2021-07-21 11:39:00 | 2021-01-04 14:15:00 |
| CVE-2020-4918 | 2.1 | IBM Cloud Pak System 2.3 could allow l local privileged user to disclose sensitive information due to an insecure direct object reference in sell service console for the Platform System Manager. IBM X-Force ID: 191392. | 2021-07-21 11:39:00 | 2021-01-04 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39823
Zapisa po stranici: