| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-13349 | 4.0 | An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted in the Advanced Search feature susceptible to catastrophic backtracking. Affected versions are >=8.12, <13.3.9,> | 2021-07-21 11:39:00 | 2020-11-17 19:15:00 |
| CVE-2020-25400 | 5.0 | Cross domain policies in Taskcafe Project Management tool before version 0.1.0 and 0.1.1 allows remote attackers to access sensitive data such as access token. | 2021-07-21 11:39:00 | 2020-11-17 18:15:00 |
| CVE-2020-27557 | 2.1 | Unprotected Storage of Credentials vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 allows local users to gain access to the video streaming username and password via SQLite files containing plain text credentials. | 2021-07-21 11:39:00 | 2020-11-17 15:15:00 |
| CVE-2020-27556 | 5.0 | A predictable device ID in BASETech GE-131 BT-1837836 firmware 20180921 allows unauthenticated remote attackers to connect to the device. | 2021-07-21 11:39:00 | 2020-11-17 15:15:00 |
| CVE-2020-27555 | 10.0 | Use of default credentials for the telnet server in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to execute arbitrary system commands as the root user. | 2021-07-21 11:39:00 | 2020-11-17 15:15:00 |
| CVE-2020-27554 | 5.0 | Cleartext Transmission of Sensitive Information vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 exists which could leak sensitive information transmitted between the mobile app and the camera device. | 2021-07-21 11:39:00 | 2020-11-17 15:15:00 |
| CVE-2020-27192 | 7.2 | BinaryNights ForkLift 3.4 was compiled with the com.apple.security.cs.disable-library-validation flag enabled which allowed a local attacker to inject code into ForkLift. This would allow the attacker to run malicious code with escalated privileges t | 2021-07-21 11:39:00 | 2020-11-17 02:15:00 |
| CVE-2020-15349 | 7.2 | BinaryNights ForkLift 3.x before 3.4 has a local privilege escalation vulnerability because the privileged helper tool implements an XPC interface that allows file operations to any process (copy, move, delete) as root and changing permissions. | 2021-07-21 11:39:00 | 2020-11-17 02:15:00 |
| CVE-2020-13358 | 2.1 | A vulnerability in the internal Kubernetes agent api in GitLab CE/EE version 13.3 and above allows unauthorized access to private projects. Affected versions are: >=13.4, <13.4.5,>=13.3, <13.3.9,>=13.5, <13.5.2. | 2021-07-21 11:39:00 | 2020-11-17 01:15:00 |
| CVE-2020-26510 | 5.0 | Airleader Master <= 6.21 devices have default credentials that can be used to access the exposed Tomcat Manager for deployment of a new .war file, with resultant remote code execution. | 2021-07-21 11:39:00 | 2020-11-16 19:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39927
Zapisa po stranici: