| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-28278 | 7.5 | Prototype pollution vulnerability in 'shvl' versions 1.0.0 through 2.0.1 allows an attacker to cause a denial of service and may lead to remote code execution. | 2020-12-30 18:39:00 | 2020-12-29 18:15:00 |
| CVE-2020-28277 | 7.5 | Prototype pollution vulnerability in 'dset' versions 1.0.0 through 2.0.1 allows attacker to cause a denial of service and may lead to remote code execution. | 2020-12-30 18:34:00 | 2020-12-29 17:15:00 |
| CVE-2020-5801 | 5.0 | An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that triggers an unhandled exception in CFTLDManager::HandleRequest function in RnaDaSvr.dll, resulting in process termination. Observed in FactoryTalk Linx 6. | 2020-12-30 18:13:00 | 2020-12-29 16:15:00 |
| CVE-2020-28912 | 4.4 | With MariaDB running on Windows, when local clients connect to the server over named pipes, it's possible for an unprivileged user with an ability to run code on the server machine to intercept the named pipe connection and act as a man-in-the-middle | 2020-12-30 18:09:00 | 2020-12-24 20:15:00 |
| CVE-2020-28276 | 7.5 | Prototype pollution vulnerability in 'deep-set' versions 1.0.0 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution. | 2020-12-30 17:43:00 | 2020-12-29 17:15:00 |
| CVE-2020-28094 | 5.0 | On Tenda AC1200 (Model AC6) 15.03.06.51_multi devices, the default settings for the router speed test contain links to download malware named elive or CNKI E-Learning. | 2020-12-30 16:53:00 | 2020-12-28 07:15:00 |
| CVE-2020-26287 | 4.3 | HedgeDoc is a collaborative platform for writing and sharing markdown. In HedgeDoc before version 1.7.1 an attacker can inject arbitrary `script` tags in HedgeDoc notes using mermaid diagrams. Our content security policy prevents loading scripts from | 2020-12-30 16:50:00 | 2020-12-29 00:15:00 |
| CVE-2020-35627 | 7.5 | Ultimate WooCommerce Gift Cards 3.0.2 is affected by a file upload vulnerability in the Custom GiftCard Template that can remotely execute arbitrary code. Once it contains the function "Custom Gift Card Template", the function of uploading a custom i | 2020-12-30 16:44:00 | 2020-12-28 15:15:00 |
| CVE-2020-29470 | 3.5 | OpenCart 3.0.3.6 is affected by cross-site scripting (XSS) in the Subject field of mail. This vulnerability can allow an attacker to inject the XSS payload in the Subject field of the mail and each time any user will open that mail of the website, th | 2020-12-30 16:43:00 | 2020-12-29 17:15:00 |
| CVE-2020-29471 | 3.5 | OpenCart 3.0.3.6 is affected by cross-site scripting (XSS) in the Profile Image. An admin can upload a profile image as a malicious code using JavaScript. Whenever anyone will see the profile picture, the code will execute and XSS will trigger. | 2020-12-30 16:42:00 | 2020-12-29 17:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: