| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-16021 | 5.1 | Race in image burner in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to perform OS-level privilege escalation via a malicious file. | 2021-01-12 15:26:00 | 2021-01-08 19:15:00 |
| CVE-2020-16012 | 4.3 | Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page. | 2021-01-12 15:16:00 | 2021-01-08 19:15:00 |
| CVE-2020-29489 | 4.6 | Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contains a plain-text password storage vulnerability. A user credentials (including the Unisphere admin privilege user) password is stored in a plain text in a system file. A loca | 2021-01-12 15:08:00 | 2021-01-05 22:15:00 |
| CVE-2020-28672 | 9.0 | MonoCMS Blog 1.0 is affected by incorrect access control that can lead to remote arbitrary code execution. At monofiles/category.php:27, user input can be saved to category/[foldername]/index.php causing RCE. | 2021-01-12 15:05:00 | 2021-01-07 15:15:00 |
| CVE-2020-29490 | 4.0 | Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contain a Denial of Service vulnerability on NAS Servers with NFS exports. A remote authenticated attacker could potentially exploit this vulnerability and cause Denial of Service | 2021-01-12 15:01:00 | 2021-01-05 22:15:00 |
| CVE-2020-26974 | 6.8 | When flex-basis was used on a table wrapper, a StyleGenericFlexBasis object could have been incorrectly cast to the wrong type. This resulted in a heap user-after-free, memory corruption, and a potentially exploitable crash. This vulnerability affect | 2021-01-12 14:56:00 | 2021-01-07 14:15:00 |
| CVE-2020-8160 | 4.3 | MendixSSO <= 2.1.1 contains endpoints that make use of the openid handler, which is suffering from a Cross-Site Scripting vulnerability via the URL path. This is caused by the reflection of user-supplied data without appropriate HTML escaping or outp | 2021-01-12 14:48:00 | 2021-01-06 15:15:00 |
| CVE-2010-1330 | 4.3 | The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string. | 2021-01-12 14:46:00 | 2012-11-23 19:55:00 |
| CVE-2020-16029 | 6.8 | Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file. | 2021-01-12 14:43:00 | 2021-01-08 19:15:00 |
| CVE-2020-36177 | 10.0 | RsaPad_PSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size. | 2021-01-12 14:39:00 | 2021-01-06 16:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: