| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2016-9022 | 7.5 | Exponent CMS before 2.6.0 has improper input validation in usersController.php. | 2021-01-04 20:11:00 | 2020-12-31 03:15:00 |
| CVE-2019-15078 | 5.0 | An issue was discovered in a smart contract implementation for AIRDROPX BORN through 2019-05-29, an Ethereum token. The name of the constructor has a typo (wrong case: XBornID versus XBORNID) that allows an attacker to change the owner of the contrac | 2021-01-04 20:09:00 | 2020-12-30 20:15:00 |
| CVE-2020-35841 | 3.5 | Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 before 1.0.1.24, JWNR2010v5 before 1.1.0.62, R6020 before 1.0.0.42, R6050 before 1.0.1.24, R6080 before | 2021-01-04 19:54:00 | 2020-12-30 00:15:00 |
| CVE-2019-15079 | 5.0 | A typo exists in the constructor of a smart contract implementation for EAI through 2019-06-05, an Ethereum token. This vulnerability could be used by an attacker to acquire EAI tokens for free. | 2021-01-04 19:51:00 | 2020-12-30 20:15:00 |
| CVE-2020-25842 | 5.0 | The encryption function of NHIServiSignAdapter fail to verify the file path input by users. Remote attacker can access arbitrary files through the flaw without privilege. | 2021-01-04 19:44:00 | 2020-12-31 08:15:00 |
| CVE-2020-5810 | 3.5 | A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user authorized to upload media can upload a malicious .svg file which act as a stored XSS payload. | 2021-01-04 19:44:00 | 2020-12-30 16:15:00 |
| CVE-2020-5809 | 3.5 | A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current. An authenticated user can inject arbitrary JavaScript code into iframes when editing content using the TinyMCE rich-text editor, as TinyMCE is configured to allow iframes by defaul | 2021-01-04 19:35:00 | 2020-12-30 16:15:00 |
| CVE-2020-25843 | 7.5 | NHIServiSignAdapter fails to verify the length of digital credential files’ path which leads to a heap overflow loophole. Remote attackers can use the leak to execute code without privilege. | 2021-01-04 19:32:00 | 2020-12-31 08:15:00 |
| CVE-2020-28734 | 6.5 | Plone before 5.2.3 allows XXE attacks via a feature that is explicitly only available to the Manager role. | 2021-01-04 19:17:00 | 2020-12-30 19:15:00 |
| CVE-2020-28735 | 6.5 | Plone before 5.2.3 allows SSRF attacks via the tracebacks feature (only available to the Manager role). | 2021-01-04 19:16:00 | 2020-12-30 19:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: