| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-26972 | 7.5 | The lifecycle of IPC Actors allows managed actors to outlive their manager actors; and the former must ensure that they are not attempting to use a dead actor they have a reference to. Such a check was omitted in WebGL, resulting in a use-after-free | 2021-01-11 19:39:00 | 2021-01-07 14:15:00 |
| CVE-2020-26971 | 6.8 | Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers. This vulnerability affects Firefox < 84, Thunderbird < 78.6, and Firefox ESR < 78.6. | 2021-01-11 19:36:00 | 2021-01-07 14:15:00 |
| CVE-2020-4663 | 3.5 | IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credent | 2021-01-11 18:28:00 | 2021-01-08 15:15:00 |
| CVE-2020-4664 | 3.5 | IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credent | 2021-01-11 18:27:00 | 2021-01-08 15:15:00 |
| CVE-2020-4666 | 3.5 | IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credent | 2021-01-11 18:26:00 | 2021-01-08 15:15:00 |
| CVE-2020-16036 | 4.3 | Inappropriate implementation in cookies in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass cookie restrictions via a crafted HTML page. | 2021-01-11 18:01:00 | 2021-01-08 19:15:00 |
| CVE-2020-8280 | 3.5 | A missing file type check in Nextcloud Contacts 3.4.0 allows a malicious user to upload SVG files as PNG files to perform cross-site scripting (XSS) attacks. | 2021-01-11 17:48:00 | 2021-01-06 21:15:00 |
| CVE-2020-8281 | 3.5 | A missing file type check in Nextcloud Contacts 3.3.0 allows a malicious user to upload malicious SVG files to perform cross-site scripting (XSS) attacks. | 2021-01-11 17:39:00 | 2021-01-06 21:15:00 |
| CVE-2020-24903 | 4.3 | Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting (XSS) caused by improper validation of user supplied input. A remote attacker could exploit this vulnerability using a specially crafted URL to execute a script in a victim's | 2021-01-11 17:34:00 | 2021-01-07 13:15:00 |
| CVE-2020-26768 | 4.3 | Formstone <=1.4.16 is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper validation of user supplied input in the upload-target.php and upload-chunked.php files. A remote attacker could exploit this vulnerability us | 2021-01-11 17:32:00 | 2021-01-07 13:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: