Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2020-5681 9.3 Untrusted search path vulnerability in self-extracting files created by EpsonNet SetupManager versions 2.2.14 and earlier, and Offirio SynergyWare PrintDirector versions 1.6x/1.6y and earlier allows an attacker to gain privileges via a Trojan horse D 2020-12-30 15:44:00
CVE-2020-35678 5.8 Autobahn|Python before 20.12.3 allows redirect header injection. 2020-12-30 15:37:00
CVE-2020-29203 7.5 struct2json before 2020-11-18 is affected by a Buffer Overflow because strcpy is used for S2J_STRUCT_GET_string_ELEMENT. 2020-12-30 15:37:00
CVE-2020-7845 7.5 Spamsniper 5.0 ~ 5.2.7 contain a stack-based buffer overflow vulnerability caused by improper boundary checks when parsing MAIL FROM command. It leads remote attacker to execute arbitrary code via crafted packet. 2020-12-30 15:36:00
CVE-2020-27837 4.4 A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing their session without authentication. This is sim 2020-12-30 15:26:00
CVE-2020-26290 6.8 Dex is a federated OpenID Connect provider written in Go. In Dex before version 2.27.0 there is a critical set of vulnerabilities which impacts users leveraging the SAML connector. The vulnerabilities enables potential signature bypass due to issues 2020-12-30 15:12:00
CVE-2020-27524 4.8 On Audi A7 MMI 2014 vehicles, the Bluetooth stack in Audi A7 MMI Multiplayer with version (N+R_CN_AU_P0395) mishandles %x and %s format string specifiers in a device name. This may lead to memory content leaks and potentially crash the services. 2020-12-30 15:12:00
CVE-2020-26034 4.0 An account-enumeration issue was discovered in Zammad before 3.4.1. The Create User functionality is implemented in a way that would enable an anonymous user to guess valid user email addresses. The application responds differently depending on wheth 2020-12-30 15:08:00
CVE-2020-13473 2.1 NCH Express Accounts 8.24 and earlier allows local users to discover the cleartext password by reading the configuration file. 2020-12-30 14:43:00
CVE-2020-29193 2.1 Panasonic Security System WV-S2231L 4.25 has an insecure hard-coded password of lkjhgfdsa (which is just the asdf keyboard row in reverse order). 2020-12-30 14:40:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/39518
Zapisa po stranici: