| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-25846 | 4.3 | The digest generation function of NHIServiSignAdapter has not been verified for source file path, which leads to the SMB request being redirected to a malicious host, resulting in the leakage of user's credential. | 2021-01-06 14:41:00 | 2020-12-31 08:15:00 |
| CVE-2020-25845 | 4.3 | Multiple functions of NHIServiSignAdapter failed to verify the users’ file path, which leads to the SMB request being redirected to a malicious host, resulting in the leakage of user's credential. | 2021-01-06 14:14:00 | 2020-12-31 08:15:00 |
| CVE-2020-35908 | 2.1 | An issue was discovered in the futures-util crate before 0.3.2 for Rust. FuturesUnordered can lead to data corruption because Sync is mishandled. | 2021-01-06 14:10:00 | 2020-12-31 09:15:00 |
| CVE-2020-35907 | 2.1 | An issue was discovered in the futures-task crate before 0.3.5 for Rust. futures_task::noop_waker_ref allows a NULL pointer dereference. | 2021-01-06 13:27:00 | 2020-12-31 09:15:00 |
| CVE-2020-17363 | 9.0 | USVN (aka User-friendly SVN) before 1.0.9 allows remote code execution via shell metacharacters in the number_start or number_end parameter to LastHundredRequest (aka lasthundredrequestAction) in the Timeline module. NOTE: this may overlap CVE-2020-2 | 2021-01-05 21:28:00 | 2020-12-31 02:15:00 |
| CVE-2020-35930 | 3.5 | Seo Panel 4.8.0 allows stored XSS by an Authenticated User via the url parameter, as demonstrated by the seo/seopanel/websites.php URI. | 2021-01-05 21:09:00 | 2020-12-31 20:15:00 |
| CVE-2020-27534 | 5.0 | util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, constructed with an empty first argument in an ioutil.TempDir call. | 2021-01-05 20:19:00 | 2020-12-30 23:15:00 |
| CVE-2021-3002 | 4.3 | Seo Panel 4.8.0 allows reflected XSS via the seo/seopanel/login.php?sec=forgot email parameter. | 2021-01-05 19:53:00 | 2021-01-01 19:15:00 |
| CVE-2020-28413 | 4.0 | In MantisBT 2.24.3, SQL Injection can occur in the parameter "access" of the mc_project_get_users function through the API SOAP. | 2021-01-05 19:16:00 | 2020-12-30 22:15:00 |
| CVE-2017-17081 | 4.3 | The gmc_mmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and heights, which allows remote attackers to cause a denial of service (integer signedness error and out-of-array read) via a crafted MPEG | 2021-01-05 19:15:00 | 2017-11-30 21:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: