| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-16030 | 4.3 | Insufficient data validation in Blink in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. | 2021-01-11 15:32:00 | 2021-01-08 19:15:00 |
| CVE-2020-16028 | 6.8 | Heap buffer overflow in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 2021-01-11 15:28:00 | 2021-01-08 19:15:00 |
| CVE-2018-25002 | 6.5 | uploader.php in the KCFinder integration project through 2018-06-01 for Drupal mishandles validation, aka SA-CONTRIB-2018-024. NOTE: This project is not covered by Drupal's security advisory policy. | 2021-01-11 15:16:00 | 2021-01-01 01:15:00 |
| CVE-2020-16018 | 6.8 | Use after free in payments in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. | 2021-01-11 15:00:00 | 2021-01-08 19:15:00 |
| CVE-2020-16016 | 6.8 | Inappropriate implementation in base in Google Chrome prior to 86.0.4240.193 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. | 2021-01-11 14:51:00 | 2021-01-08 19:15:00 |
| CVE-2021-21234 | 4.0 | spring-boot-actuator-logview in a library that adds a simple logfile viewer as spring boot actuator endpoint. It is maven package "eu.hinsch:spring-boot-actuator-logview". In spring-boot-actuator-logview before version 0.2.13 there is a directory tra | 2021-01-11 14:41:00 | 2021-01-05 18:15:00 |
| CVE-2020-36171 | 4.3 | The Elementor Website Builder plugin before 3.0.14 for WordPress does not properly restrict SVG uploads. | 2021-01-11 14:12:00 | 2021-01-06 15:15:00 |
| CVE-2020-35952 | 4.0 | login.php in PHPFusion (aka PHP-Fusion) Andromeda 9.x before 2020-12-30 generates error messages that distinguish between incorrect username and incorrect password (i.e., not a single "Incorrect username or password" message in both cases), which mig | 2021-01-11 14:10:00 | 2021-01-03 04:15:00 |
| CVE-2020-26759 | 7.5 | clickhouse-driver before 0.1.5 allows a malicious clickhouse server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, due to a buffer overflow. | 2021-01-08 21:19:00 | 2021-01-06 13:15:00 |
| CVE-2020-36172 | 4.3 | The Advanced Custom Fields plugin before 5.8.12 for WordPress mishandles the escaping of strings in Select2 dropdowns, potentially leading to XSS. | 2021-01-08 21:14:00 | 2021-01-06 15:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: