| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-36112 | 7.5 | CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pubid parameter in bookPerPub.php and in cart.php. A successful exploitation of this vulnerability will lead to an attacker dumping t | 2021-01-07 21:17:00 | 2021-01-04 15:15:00 |
| CVE-2021-3004 | 5.0 | The _deposit function in the smart contract implementation for Stable Yield Credit (yCREDIT), an Ethereum token, has certain incorrect calculations. An attacker can obtain more yCREDIT tokens than they should. | 2021-01-07 20:52:00 | 2021-01-03 04:15:00 |
| CVE-2020-26292 | 7.5 | Creeper is an experimental dynamic, interpreted language. The binary release of Creeper Interpreter 1.1.3 contains potential malware. The compromised binary release was available for a few hours between December 26, 2020 at 3:22 PM EST to December 26 | 2021-01-07 20:37:00 | 2021-01-04 18:15:00 |
| CVE-2020-26293 | 4.3 | HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks. In HtmlSanitizer before version 5.0.372, there is a possible XSS bypass if style tag is allowed. If you have explicitly allowed th | 2021-01-07 20:29:00 | 2021-01-04 19:15:00 |
| CVE-2021-3018 | 7.5 | ipeak Infosystems ibexwebCMS (aka IPeakCMS) 3.5 is vulnerable to an unauthenticated Boolean-based SQL injection via the id parameter on the /cms/print.php page. | 2021-01-07 20:06:00 | 2021-01-05 05:15:00 |
| CVE-2021-3019 | 5.0 | ffay lanproxy 0.1 allows Directory Traversal to read /../conf/config.properties to obtain credentials for a connection to the intranet. | 2021-01-07 19:56:00 | 2021-01-05 05:15:00 |
| CVE-2020-36067 | 5.0 | GJSON <=v1.6.5 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a crafted GET call. | 2021-01-07 19:48:00 | 2021-01-05 21:15:00 |
| CVE-2021-3005 | 4.0 | MK-AUTH through 19.01 K4.9 allows remote attackers to obtain sensitive information (e.g., a CPF number) via a modified titulo (aka invoice number) value to the central/recibo.php URI. | 2021-01-07 19:46:00 | 2021-01-03 04:15:00 |
| CVE-2021-21495 | 6.8 | MK-AUTH through 19.01 K4.9 allows CSRF for password changes via the central/executar_central.php?acao=altsenha_princ URI. | 2021-01-07 19:21:00 | 2021-01-04 03:15:00 |
| CVE-2020-11980 | 6.5 | In Karaf, JMX authentication takes place using JAAS and authorization takes place using ACL files. By default, only an "admin" can actually invoke on an MBean. However there is a vulnerability there for someone who is not an admin, but has a "viewer" | 2021-01-07 19:02:00 | 2020-06-12 22:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: