| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-26035 | 3.5 | An issue was discovered in Zammad before 3.4.1. There is Stored XSS via a Tags element in a TIcket. | 2020-12-29 14:20:00 | 2020-12-28 08:15:00 |
| CVE-2020-29245 | 4.3 | dhowden tag before 2020-11-19 allows "panic: runtime error: slice bounds out of range" via readAtomData. | 2020-12-29 14:16:00 | 2020-12-28 08:15:00 |
| CVE-2020-29244 | 4.3 | dhowden tag before 2020-11-19 allows "panic: runtime error: slice bounds out of range" via readTextWithDescrFrame. | 2020-12-29 14:16:00 | 2020-12-28 08:15:00 |
| CVE-2020-29243 | 4.3 | dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readAPICFrame. | 2020-12-29 14:16:00 | 2020-12-28 08:15:00 |
| CVE-2020-29242 | 4.3 | dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readPICFrame. | 2020-12-29 14:16:00 | 2020-12-28 08:15:00 |
| CVE-2018-10959 | 5.0 | Avecto Defendpoint 4 prior to 4.4 SR6 and 5 prior to 5.1 SR1 has an Untrusted Search Path vulnerability, exploitable by modifying environment variables to trigger automatic elevation of an attacker's process launch. | 2020-12-28 21:15:00 | 2019-04-17 15:29:00 |
| CVE-2020-35347 | 4.3 | CXUUCMS V3 3.1 has a CSRF vulnerability that can add an administrator account via admin.php?c=adminuser&a=add. | 2020-12-28 20:33:00 | 2020-12-26 04:15:00 |
| CVE-2020-35346 | 3.5 | CXUUCMS V3 3.1 is affected by a reflected XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the imgurl parameter of admin.php?c=content&a=add. | 2020-12-28 20:21:00 | 2020-12-26 04:15:00 |
| CVE-2020-35715 | 9.0 | Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote authenticated users to execute arbitrary commands via shell metacharacters in a filename to the upload_settings.cgi page. | 2020-12-28 20:09:00 | 2020-12-26 01:15:00 |
| CVE-2020-35716 | 7.8 | Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to cause a persistent denial of service (segmentation fault) via a long /goform/langSwitch langSelectionOnly parameter. | 2020-12-28 19:59:00 | 2020-12-26 01:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: