| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-10656 | 7.5 | The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application server's WriteWindowMouseWithChunksV2 API. The vulnerability allows an anonymous remote attacker to execute arbit | 2021-01-08 20:40:00 | 2021-01-06 14:15:00 |
| CVE-2020-10655 | 7.5 | The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application server's WriteWindowMouse API. The vulnerability allows an anonymous remote attacker to execute arbitrary code wi | 2021-01-08 20:40:00 | 2021-01-06 14:15:00 |
| CVE-2020-10657 | 6.5 | The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM web console's ImportAlertRules feature. The vulnerability allows a remote attacker (with admin or config-admin privileges in | 2021-01-08 20:39:00 | 2021-01-06 14:15:00 |
| CVE-2020-10658 | 7.5 | The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.9.1 contains a vulnerability in the ITM application server's WriteImage API. The vulnerability allows an anonymous remote attacker to execute arbitrary code with loc | 2021-01-08 20:32:00 | 2021-01-06 14:15:00 |
| CVE-2012-10001 | 5.0 | The Limit Login Attempts plugin before 1.7.1 for WordPress does not clear auth cookies upon a lockout, which might make it easier for remote attackers to conduct brute-force authentication attempts. | 2021-01-08 20:19:00 | 2021-01-06 15:15:00 |
| CVE-2020-36170 | 5.0 | The Ultimate Member plugin before 2.1.13 for WordPress mishandles hidden name="timestamp" fields in forms. | 2021-01-08 20:04:00 | 2021-01-06 14:15:00 |
| CVE-2020-4895 | 3.5 | IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially le | 2021-01-08 19:58:00 | 2021-01-07 18:15:00 |
| CVE-2020-4893 | 4.3 | IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 transmits sensitive information in HTTP GET request parameters. This may lead to information disclosure via man in the middle methods. IBM X-Force ID: 190984. | 2021-01-08 19:56:00 | 2021-01-07 18:15:00 |
| CVE-2020-4898 | 5.0 | IBM Emptoris Strategic Supply Management 10.1.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 190989. | 2021-01-08 19:55:00 | 2021-01-07 18:15:00 |
| CVE-2020-36174 | 4.3 | The Ninja Forms plugin before 3.4.27.1 for WordPress allows CSRF via services integration. | 2021-01-08 19:46:00 | 2021-01-06 15:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: