| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-23490 | 5.0 | There was a local file disclosure vulnerability in AVideo < 8.9 via the proxy streaming. An unauthenticated attacker can exploit this issue to read an arbitrary file on the server. Which could leak database credentials or other sensitive information | 2021-07-21 11:39:00 | 2020-11-16 18:15:00 |
| CVE-2020-23489 | 6.5 | The import.json.php file before 8.9 for Avideo is vulnerable to a File Deletion vulnerability. This allows the deletion of configuration.php, which leads to certain privilege checks not being in place, and therefore a user can escalate privileges to | 2021-07-21 11:39:00 | 2020-11-16 18:15:00 |
| CVE-2020-28723 | 5.0 | Memory leak in IPv6Param::setAddress in CloudAvid PParam 1.3.1. | 2021-07-21 11:39:00 | 2020-11-16 17:15:00 |
| CVE-2020-25210 | 5.0 | In JetBrains YouTrack before 2020.3.7955, an attacker could access workflow rules without appropriate access grants. | 2021-07-21 11:39:00 | 2020-11-16 15:15:00 |
| CVE-2020-25209 | 5.0 | In JetBrains YouTrack before 2020.3.6638, improper access control for some subresources leads to information disclosure via the REST API. | 2021-07-21 11:39:00 | 2020-11-16 15:15:00 |
| CVE-2020-24366 | 2.1 | Sensitive information could be disclosed in the JetBrains YouTrack application before 2020.2.0 for Android via application backups. | 2021-07-21 11:39:00 | 2020-11-16 15:15:00 |
| CVE-2019-19562 | 2.1 | An authentication bypass in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with physical access to device hardware to obtain system information. | 2021-07-21 11:39:00 | 2020-11-16 00:15:00 |
| CVE-2019-19560 | 2.1 | An authentication bypass in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with physical access to device hardware to obtain system information. | 2021-07-21 11:39:00 | 2020-11-16 00:15:00 |
| CVE-2019-19556 | 2.1 | An authentication bypass in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with physical access to device hardware to obtain system information. | 2021-07-21 11:39:00 | 2020-11-16 00:15:00 |
| CVE-2020-13638 | 7.5 | lib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to administrator account creation. This issue has been fixed in 3.9.7. | 2021-07-21 11:39:00 | 2020-11-13 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39927
Zapisa po stranici: