Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2020-35370 9.3 A RCE vulnerability exists in Raysync below 3.3.3.8. An unauthenticated unauthorized attacker sending a specifically crafted request to override the specific file in server with malicious content can login as "admin", then to modify specific shell fi 2021-07-21 11:39:00
CVE-2020-11719 5.0 An issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and possibly below. It relies on broken encryption with a weak and guessable static encryption key. 2021-07-21 11:39:00
CVE-2020-35584 4.3 In Solstice Pod before 3.0.3, the web services allow users to connect to them over unencrypted channels via the Browser Look-in feature. An attacker suitably positioned to view a legitimate user's network traffic could record and monitor their intera 2021-07-21 11:39:00
CVE-2020-35658 5.0 SpamTitan before 7.09 allows attackers to tamper with backups, because backups are not encrypted. 2021-07-21 11:39:00
CVE-2020-27338 4.8 An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the DHCPv6 client component allows an unauthenticated remote attacker to cause an Out of Bounds Read, and possibly a Denial of Service via adjacent network access. 2021-07-21 11:39:00
CVE-2020-14270 5.0 HCL Domino v9, v10, v11 is susceptible to an Information Disclosure vulnerability in XPages due to improper error handling of user input. An unauthenticated attacker could exploit this vulnerability to obtain information about the XPages software run 2021-07-21 11:39:00
CVE-2020-35609 2.1 A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure Sphere 20.05. A sequence of specially crafted ioctl calls can cause a denial of service. An attacker can write shellcode to trigger this vulnerability 2021-07-21 11:39:00
CVE-2020-14231 6.5 A vulnerability in the input parameter handling of HCL Client Application Access v9 could potentially be exploited by an authenticated attacker resulting in a stack buffer overflow. This could allow the attacker to crash the program or inject code in 2021-07-21 11:39:00
CVE-2020-25106 9.3 Nanosystems SupRemo 4.1.3.2348 allows attackers to obtain LocalSystem access because File Manager can be used to rename Supremo.exe and then upload a Trojan horse with the Supremo.exe filename. 2021-07-21 11:39:00
CVE-2020-35625 6.5 An issue was discovered in the Widgets extension for MediaWiki through 1.35.1. Any user with the ability to edit pages within the Widgets namespace could call any static function within any class (defined within PHP or MediaWiki) via a crafted HTML c 2021-07-21 11:39:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/39823
Zapisa po stranici: