| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-4928 | 4.6 | IBM Cloud Pak System 2.3 could allow a local privileged attacker to upload arbitrary files. By intercepting the request and modifying the file extention, the attacker could execute arbitrary code on the server. IBM X-Force ID: 191705. | 2021-01-05 14:53:00 | 2021-01-04 14:15:00 |
| CVE-2020-29299 | 9.0 | Certain Zyxel products allow command injection by an admin via an input string to chg_exp_pwd during a password-change action. This affects VPN On-premise before ZLD V4.39 week38, VPN Orchestrator before SD-OS V10.03 week32, USG before ZLD V4.39 week | 2021-01-05 14:47:00 | 2020-12-27 06:15:00 |
| CVE-2018-16795 | 6.8 | OpenEMR 5.0.1.3 allows Cross-Site Request Forgery (CSRF) via library/ajax and interface/super, as demonstrated by use of interface/super/manage_site_files.php to upload a .php file. | 2021-01-05 14:45:00 | 2020-12-31 03:15:00 |
| CVE-2019-7726 | 7.5 | modules/banners/funcs/click.php in NukeViet before 4.3.04 has a SQL INSERT statement with raw header data from an HTTP request (e.g., Referer and User-Agent). | 2021-01-05 14:44:00 | 2020-12-31 05:15:00 |
| CVE-2019-7725 | 7.5 | includes/core/is_user.php in NukeViet before 4.3.04 deserializes the untrusted nvloginhash cookie (i.e., the code relies on PHP's serialization format when JSON can be used to eliminate the risk). | 2021-01-05 14:44:00 | 2020-12-31 05:15:00 |
| CVE-2020-25797 | 3.5 | LimeSurvey 3.21.1 is affected by cross-site scripting (XSS) in the Add Participants Function (First and last name parameters). When the survey participant being edited, e.g. by an administrative user, the JavaScript code will be executed in the brows | 2021-01-05 14:20:00 | 2020-12-31 18:15:00 |
| CVE-2020-25799 | 3.5 | LimeSurvey 3.21.1 is affected by cross-site scripting (XSS) in the Quota component of the Survey page. When the survey quota being viewed, e.g. by an administrative user, the JavaScript code will be executed in the browser. | 2021-01-05 13:40:00 | 2020-12-31 18:15:00 |
| CVE-2017-11719 | 6.8 | The dnxhd_decode_header function in libavcodec/dnxhddec.c in FFmpeg 3.0 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via a crafted DNxHD file. | 2021-01-04 22:15:00 | 2017-07-28 05:29:00 |
| CVE-2017-11399 | 6.8 | Integer overflow in the ape_decode_frame function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access and application crash) or possibly have unspecified other impact via a craf | 2021-01-04 22:15:00 | 2017-07-17 19:29:00 |
| CVE-2019-16747 | 5.0 | In MatrixSSL before 4.2.2 Open, the DTLS server can encounter an invalid pointer free (leading to memory corruption and a daemon crash) via a crafted incoming network message, a different vulnerability than CVE-2019-14431. | 2021-01-04 21:36:00 | 2020-12-30 21:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: