| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-25794 | 5.0 | An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, clone can have a memory-safety issue upon a panic. | 2021-01-12 13:43:00 | 2020-09-19 21:15:00 |
| CVE-2020-25793 | 5.0 | An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with From<InlineArray<A, T>>. | 2021-01-12 13:43:00 | 2020-09-19 21:15:00 |
| CVE-2020-25796 | 5.0 | An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the InlineArray implementation, an unaligned reference may be generated for a type that has a large alignment requirement. | 2021-01-12 13:41:00 | 2020-09-19 21:15:00 |
| CVE-2020-36048 | 5.0 | Engine.IO before 4.0.0 allows attackers to cause a denial of service (resource consumption) via a POST request to the long polling transport. | 2021-01-12 03:55:00 | 2021-01-08 00:15:00 |
| CVE-2020-35932 | 6.0 | Insecure Deserialization in the Newsletter plugin before 6.8.2 for WordPress allows authenticated remote attackers with minimal privileges (such as subscribers) to use the tpnc_render AJAX action to inject arbitrary PHP objects via the options[inline | 2021-01-11 21:44:00 | 2021-01-01 02:15:00 |
| CVE-2020-26973 | 6.8 | Certain input to the CSS Sanitizer confused it, resulting in incorrect components being removed. This could have been used as a sanitizer bypass. This vulnerability affects Firefox < 84, Thunderbird < 78.6, and Firefox ESR < 78.6. | 2021-01-11 21:41:00 | 2021-01-07 14:15:00 |
| CVE-2020-35936 | 6.0 | Stored Cross-Site Scripting (XSS) vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to import layouts including JavaScript supplied via a remotely hosted crafted payload in the source parameter v | 2021-01-11 21:38:00 | 2021-01-01 02:15:00 |
| CVE-2020-35939 | 6.0 | PHP Object injection vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticated attackers to inject arbitrary PHP objects due to insecure unserialization of data supplied in a remotely hosted crafted payload i | 2021-01-11 21:36:00 | 2021-01-01 02:15:00 |
| CVE-2020-35937 | 6.0 | Stored Cross-Site Scripting (XSS) vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticated attackers to import layouts including JavaScript supplied via a remotely hosted crafted payload in the source parame | 2021-01-11 21:36:00 | 2021-01-01 02:15:00 |
| CVE-2020-36162 | 7.2 | An issue was discovered in Veritas CloudPoint before 8.3.0.1+hotfix. The CloudPoint Windows Agent leverages OpenSSL. This OpenSSL library attempts to load the \usr\local\ssl\openssl.cnf configuration file, which does not exist. By default, on Windows | 2021-01-11 21:27:00 | 2021-01-06 01:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: