| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-35807 | 3.5 | Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.68, RAX120 before 1.0.0.78, RBK22 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30, RBR40 before 2.3.5.30, | 2021-01-04 16:18:00 | 2020-12-30 00:15:00 |
| CVE-2020-35808 | 3.5 | Certain NETGEAR devices are affected by stored XSS. This affects D6100 before 1.0.0.63, DM200 before 1.0.0.61, R7800 before 1.0.2.52, R8900 before 1.0.4.12, R9000 before 1.0.4.12, WN3000RPv2 before 1.0.0.68, and WNR2000v5 before 1.0.0.66. | 2021-01-04 15:55:00 | 2020-12-30 00:15:00 |
| CVE-2020-35806 | 3.5 | Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, RAX120 before 1.0.0.78, RBK22 before 2.3.5.26, RBR20 before 2.3.5.26, RBS20 before 2.3.5.26, RBK40 before 2.3.5.30 | 2021-01-04 15:48:00 | 2020-12-30 00:15:00 |
| CVE-2020-29594 | 7.5 | Rocket.Chat before 0.74.4, 1.x before 1.3.4, 2.x before 2.4.13, 3.x before 3.7.3, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 mishandles SAML login. | 2021-01-04 15:43:00 | 2020-12-30 07:15:00 |
| CVE-2019-1855 | 9.3 | A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Jabber for Windows could allow an authenticated, local attacker to perform a DLL preloading attack. To exploit this vulnerability, the attacker would need to have va | 2021-01-04 15:22:00 | 2019-07-04 20:15:00 |
| CVE-2020-29233 | 3.5 | WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Page description component. This vulnerability can allow an attacker to inject the XSS payload in the Page description and each time any user will visits the website, the XSS triggers a | 2021-01-04 15:21:00 | 2020-12-30 15:15:00 |
| CVE-2020-29469 | 3.5 | WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Menu component. This vulnerability can allow an attacker to inject the XSS payload in the Setting - Menu and each time any user will visits the website directory, the XSS triggers and a | 2021-01-04 15:16:00 | 2020-12-30 15:15:00 |
| CVE-2020-35735 | 4.3 | Vidyo 02-09-/D allows clickjacking via the portal/ URI. | 2021-01-04 15:16:00 | 2020-12-29 19:15:00 |
| CVE-2020-35798 | 7.2 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R6400v2 before 1.0.4.84, R6700v3 before 1.0.4.84, R6900P before 1.3.2.124, R7000 before 1.0.11.100, R7000P before 1.3.2.124, R7800 before 1.0.2.74, | 2021-01-04 15:07:00 | 2020-12-30 00:15:00 |
| CVE-2020-27848 | 6.5 | dotCMS before 20.10.1 allows SQL injection, as demonstrated by the /api/v1/containers orderby parameter. The PaginatorOrdered classes that are used to paginate results of a REST endpoints do not sanitize the orderBy parameter and in some cases it is | 2021-01-04 15:00:00 | 2020-12-30 19:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: