| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-29158 | 4.0 | An issue was discovered in Zammad before 3.5.1. An Agent with Customer permissions in a Group can bypass intended access control on internal Articles via the Ticket detail view. | 2021-07-21 11:39:00 | 2020-12-28 08:15:00 |
| CVE-2020-29156 | 5.0 | The WooCommerce plugin before 4.7.0 for WordPress allows remote attackers to view the status of arbitrary orders via the order_id parameter in a fetch_order_status action. | 2021-07-21 11:39:00 | 2020-12-27 19:15:00 |
| CVE-2020-35364 | 7.5 | Beijing Huorong Internet Security 5.0.55.2 allows a non-admin user to escalate privileges by injecting code into a process, and then waiting for a Huorong services restart or a system reboot. | 2021-07-21 11:39:00 | 2020-12-26 19:15:00 |
| CVE-2020-25917 | 6.5 | Stratodesk NoTouch Center before 4.4.68 is affected by: Incorrect Access Control. A low privileged user on the platform, for example a user with "helpdesk" privileges, can perform privileged operations including adding a new administrator to the plat | 2021-07-21 11:39:00 | 2020-12-26 02:15:00 |
| CVE-2020-35714 | 6.5 | Belkin LINKSYS RE6500 devices before 1.0.11.001 allow remote authenticated users to execute arbitrary commands via goform/systemCommand?command= in conjunction with the goform/pingstart program. | 2021-07-21 11:39:00 | 2020-12-26 01:15:00 |
| CVE-2020-24658 | 4.4 | Arm Compiler 5 through 5.06u6 has an error in a stack protection feature designed to help spot stack-based buffer overflows in local arrays. When this feature is enabled, a protected function writes a guard value to the stack prior to (above) any vul | 2021-07-21 11:39:00 | 2020-12-24 18:15:00 |
| CVE-2020-9119 | 4.6 | There is a privilege escalation vulnerability on some Huawei smart phones due to design defects. The attacker needs to physically contact the mobile phone and obtain higher privileges, and execute relevant commands, resulting in the user's privilege | 2021-07-21 11:39:00 | 2020-12-24 16:15:00 |
| CVE-2020-27725 | 3.5 | In version 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2 of BIG-IP DNS, GTM, and Link Controller, zxfrd leaks memory when listing DNS zones. Zones can be listed via TMSH, iControl or SNMP; only users with acces | 2021-07-21 11:39:00 | 2020-12-24 15:15:00 |
| CVE-2020-27718 | 5.0 | When a BIG-IP ASM or Advanced WAF system running version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, or 11.6.1-11.6.5.2 processes requests with JSON payload, an unusually large number of parameters can cause exc | 2021-07-21 11:39:00 | 2020-12-24 15:15:00 |
| CVE-2020-35677 | 3.5 | BigProf Online Invoicing System before 4.0 fails to adequately sanitize fields for HTML characters upon an administrator using admin/pageEditGroup.php to create a new group, resulting in Stored XSS. The caveat here is that an attacker would need admi | 2021-07-21 11:39:00 | 2020-12-24 04:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39823
Zapisa po stranici: