| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-20314 | 6.8 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCheckLicence race condition that can cause a stack-based buffer overflow or an out-of-bounds read. | 2021-01-08 16:42:00 | 2021-01-07 18:15:00 |
| CVE-2018-20315 | 6.8 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a race condition that can cause a stack-based buffer overflow or an out-of-bounds read. | 2021-01-08 16:41:00 | 2021-01-07 18:15:00 |
| CVE-2020-36159 | 5.0 | Veritas Desktop and Laptop Option (DLO) before 9.5 disclosed operational information on the backup processing status through a URL that did not require authentication. | 2021-01-08 16:35:00 | 2021-01-05 19:15:00 |
| CVE-2018-20316 | 6.8 | Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read, a different issue than CVE-2018-20310 because of a different opcode. | 2021-01-08 16:32:00 | 2021-01-07 18:15:00 |
| CVE-2015-2992 | 4.3 | Apache Struts before 2.3.20 has a cross-site scripting (XSS) vulnerability. | 2021-01-08 16:32:00 | 2020-02-27 18:15:00 |
| CVE-2019-20483 | 3.5 | An issue was discovered in Viki Vera 4.9.1.26180. An attacker could set a user's last name to an XSS Payload, and read another user's cookie and use that to login to the application. | 2021-01-08 16:24:00 | 2021-01-05 21:15:00 |
| CVE-2020-29491 | 5.0 | Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to the sensitive information on the local network, leading | 2021-01-08 16:24:00 | 2021-01-04 22:15:00 |
| CVE-2020-29492 | 6.4 | Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to access the writable file and manipulate the configuration of any target | 2021-01-08 16:23:00 | 2021-01-04 22:15:00 |
| CVE-2020-26046 | 4.3 | FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account and also impact other visitors. | 2021-01-08 16:19:00 | 2021-01-05 15:15:00 |
| CVE-2020-26045 | 7.5 | FUEL CMS 1.4.11 allows SQL Injection via parameter 'name' in /fuel/permissions/create/. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. | 2021-01-08 16:19:00 | 2021-01-05 15:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: