Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2020-35359 5.0 Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit. 2020-12-29 21:14:00
CVE-2020-35736 5.0 GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join is misused. 2020-12-29 20:50:00
CVE-2020-35242 7.5 Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserTeamInfoInDbAndMemory. 2020-12-29 20:35:00
CVE-2020-35243 7.5 Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserInfoInDb. 2020-12-29 20:27:00
CVE-2020-35244 7.5 Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addGroup. 2020-12-29 20:19:00
CVE-2020-35245 7.5 Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addUser. 2020-12-29 20:14:00
CVE-2020-35450 5.0 Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain set_language calls. 2020-12-29 18:32:00
CVE-2020-29204 4.3 XXL-JOB 2.2.0 allows Stored XSS (in Add User) to bypass the 20-character limit via xxl-job-admin/src/main/java/com/xxl/job/admin/controller/UserController.java. 2020-12-29 18:18:00
CVE-2020-35349 3.5 Savsoft Quiz 5 is affected by: Cross Site Scripting (XSS) via field_title (aka a title on the custom fields page). 2020-12-29 17:35:00
CVE-2020-35388 5.0 rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in which the ajaxbool value is manipulated to be true. 2020-12-29 17:35:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/39518
Zapisa po stranici: