| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-35623 | 5.0 | An issue was discovered in the CasAuth extension for MediaWiki through 1.35.1. Due to improper username validation, it allowed user impersonation with trivial manipulations of certain characters within a given username. An ordinary user may be able t | 2021-07-21 11:39:00 | 2020-12-21 23:15:00 |
| CVE-2020-6882 | 5.0 | ZTE E8810/E8820/E8822 series routers have an information leak vulnerability, which is caused by hard-coded MQTT service access credentials on the device. The remote attacker could use this credential to connect to the MQTT server, so as to obtain inf | 2021-07-21 11:39:00 | 2020-12-21 18:15:00 |
| CVE-2020-5808 | 5.0 | In certain scenarios in Tenable.sc prior to 5.17.0, a scanner could potentially be used outside the user's defined scan zone without a particular zone being specified within the Automatic Distribution configuration. | 2021-07-21 11:39:00 | 2020-12-21 18:15:00 |
| CVE-2020-4841 | 4.3 | IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using | 2021-07-21 11:39:00 | 2020-12-21 18:15:00 |
| CVE-2019-16959 | 4.0 | SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket. | 2021-07-21 11:39:00 | 2020-12-21 16:15:00 |
| CVE-2020-26049 | 4.3 | Nifty-PM CPE 2.3 is affected by stored HTML injection. The impact is remote arbitrary code execution. | 2021-07-21 11:39:00 | 2020-12-21 15:15:00 |
| CVE-2020-17520 | 4.0 | In the Pulsar manager 0.1.0 version, malicious users will be able to bypass pulsar-manager's admin, permission verification mechanism by constructing special URLs, thereby accessing any HTTP API. | 2021-07-21 11:39:00 | 2020-12-18 21:15:00 |
| CVE-2020-27687 | 6.8 | ThingsBoard before v3.2 is vulnerable to Host header injection in password-reset emails. This allows an attacker to send malicious links in password-reset emails to victims, pointing to an attacker-controlled server. Lack of validation of the Host he | 2021-07-21 11:39:00 | 2020-12-18 19:15:00 |
| CVE-2020-20299 | 5.0 | WeiPHP 5.0 does not properly restrict access to pages, related to using POST. | 2021-07-21 11:39:00 | 2020-12-18 19:15:00 |
| CVE-2020-20298 | 7.5 | Eval injection vulnerability in the parserCommom method in the ParserTemplate class in zzz_template.php in zzzphp 1.7.2 allows remote attackers to execute arbitrary commands. | 2021-07-21 11:39:00 | 2020-12-18 19:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39823
Zapisa po stranici: