| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-10208 | 9.0 | Command Injection in EntoneWebEngine in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows authenticated remote attackers to execute arbitrary commands with root user privileges. | 2021-07-21 11:39:00 | 2020-12-30 00:15:00 |
| CVE-2020-27643 | 4.0 | The %PROGRAMDATA%\1E\Client directory in 1E Client 5.0.0.745 and 4.1.0.267 allows remote authenticated users and local users to create and modify files in protected directories (where they would not normally have access to create or modify files) via | 2021-07-21 11:39:00 | 2020-12-29 21:15:00 |
| CVE-2020-16268 | 6.5 | The MSI installer in 1E Client 4.1.0.267 and 5.0.0.745 allows remote authenticated users and local users to gain elevated privileges via the repair option. This applies to installations that have a TRANSFORM (MST) with the option to disable the insta | 2021-07-21 11:39:00 | 2020-12-29 21:15:00 |
| CVE-2020-9208 | 4.0 | There is an information leak vulnerability in iManager NetEco 6000 versions V600R021C00. A module is lack of authentication. Attackers without access to the module can exploit this vulnerability to obtain extra information, leading to information lea | 2021-07-21 11:39:00 | 2020-12-29 18:15:00 |
| CVE-2020-9124 | 5.0 | There is a memory leak vulnerability in some versions of Huawei CloudEngine product. An unauthenticated, remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory prope | 2021-07-21 11:39:00 | 2020-12-29 18:15:00 |
| CVE-2020-1848 | 2.1 | There is a resource management error vulnerability in Jackman-AL00D versions 8.2.0.185(C00R2P1). Local attackers construct malicious application files, causing system applications to run abnormally. | 2021-07-21 11:39:00 | 2020-12-29 18:15:00 |
| CVE-2020-13474 | 4.0 | In NCH Express Accounts 8.24 and earlier, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as Add/Edit users. | 2021-07-21 11:39:00 | 2020-12-28 22:15:00 |
| CVE-2020-27172 | 7.5 | An issue was discovered in G-Data before 25.5.9.25 using Symbolic links, it is possible to abuse the infected-file restore mechanism to achieve arbitrary write that leads to elevation of privileges. | 2021-07-21 11:39:00 | 2020-12-28 21:15:00 |
| CVE-2020-35614 | 5.0 | An issue was discovered in Joomla! 3.9.0 through 3.9.22. Improper handling of the username leads to a user enumeration attack vector in the backend login page. | 2021-07-21 11:39:00 | 2020-12-28 20:15:00 |
| CVE-2020-29160 | 5.0 | An issue was discovered in Zammad before 3.5.1. A REST API call allows an attacker to change Ticket Article data in a way that defeats auditing. | 2021-07-21 11:39:00 | 2020-12-28 08:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39823
Zapisa po stranici: