| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-36178 | 10.0 | oal_ipt_addBridgeIsolationRules on TP-Link TL-WR840N 6_EU_0.9.1_4.16 devices allows OS command injection because a raw string entered from the web interface (an IP address field) is used directly for a call to the system library function (for iptable | 2021-01-12 14:38:00 | 2021-01-06 21:15:00 |
| CVE-2020-16027 | 4.3 | Insufficient policy enforcement in developer tools in Google Chrome prior to 87.0.4280.66 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from the user's disk via a crafted Chrome | 2021-01-12 14:32:00 | 2021-01-08 19:15:00 |
| CVE-2011-4838 | 5.0 | JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintai | 2021-01-12 14:30:00 | 2011-12-30 01:55:00 |
| CVE-2020-16020 | 6.8 | Inappropriate implementation in cryptohome in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass discretionary access control via a malicious file. | 2021-01-12 14:22:00 | 2021-01-08 19:15:00 |
| CVE-2020-16019 | 6.8 | Inappropriate implementation in filesystem in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file. | 2021-01-12 14:18:00 | 2021-01-08 19:15:00 |
| CVE-2020-8264 | 4.3 | In actionpack gem >= 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed (in another page) a specially crafted URL which can allow the attacker to execute JavaScript in t | 2021-01-12 14:17:00 | 2021-01-06 21:15:00 |
| CVE-2020-4606 | 3.6 | IBM Security Verify Privilege Manager 10.8 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A local attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-F | 2021-01-12 14:07:00 | 2021-01-08 15:15:00 |
| CVE-2019-20934 | 5.4 | An issue was discovered in the Linux kernel before 5.2.6. On NUMA systems, the Linux fair scheduler has a use-after-free in show_numa_stats() because NUMA fault statistics are inappropriately freed, aka CID-16d51a590a8c. | 2021-01-12 13:49:00 | 2020-11-28 07:15:00 |
| CVE-2020-25791 | 5.0 | An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with unit(). | 2021-01-12 13:44:00 | 2020-09-19 21:15:00 |
| CVE-2020-25795 | 5.0 | An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, insert_from can have a memory-safety issue upon a panic. | 2021-01-12 13:43:00 | 2020-09-19 21:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: