Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2020-36066 5.0 GJSON <1.6.5 allows attackers to cause a denial of service (remote) via crafted JSON. 2021-01-07 18:54:00
CVE-2021-3021 7.5 ISPConfig before 3.2.2 allows SQL injection. 2021-01-07 18:23:00
CVE-2020-29437 5.5 SQL injection in the Buzz module of OrangeHRM through 4.6 allows remote authenticated attackers to execute arbitrary SQL commands via the orangehrmBuzzPlugin/lib/dao/BuzzDao.php loadMorePostsForm[profileUserId] parameter to the buzz/loadMoreProfile e 2021-01-07 17:39:00
CVE-2020-35898 6.4 An issue was discovered in the actix-utils crate before 2.0.0 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data. 2021-01-07 17:37:00
CVE-2020-35717 3.5 zonote through 0.4.0 allows XSS via a crafted note, with resultant Remote Code Execution (because nodeIntegration in webPreferences is true). 2021-01-07 17:10:00
CVE-2020-35901 5.0 An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream. 2021-01-07 16:48:00
CVE-2020-35902 7.5 An issue was discovered in the actix-codec crate before 0.3.0-beta.1 for Rust. There is a use-after-free in Framed. 2021-01-07 16:46:00
CVE-2020-35864 5.0 An issue was discovered in the flatbuffers crate through 2020-04-11 for Rust. read_scalar (and read_scalar_at) can transmute values without unsafe blocks. 2021-01-07 16:45:00
CVE-2020-35881 7.5 An issue was discovered in the traitobject crate through 2020-06-01 for Rust. It has false expectations about fat pointers, possibly causing memory corruption in, for example, Rust 2.x. 2021-01-07 16:44:00
CVE-2020-35883 6.4 An issue was discovered in the mozwire crate through 2020-08-18 for Rust. A ../ directory-traversal situation allows overwriting local files that have .conf at the end of the filename. 2021-01-07 16:40:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/39518
Zapisa po stranici: