| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-35707 | 3.5 | Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen. | 2020-12-28 19:03:00 | 2020-12-25 06:15:00 |
| CVE-2020-35706 | 3.5 | Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen. | 2020-12-28 18:53:00 | 2020-12-25 06:15:00 |
| CVE-2020-27724 | 4.0 | In BIG-IP APM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, on systems running more than one TMM instance, authenticated VPN users may consume excessive resources by | 2020-12-28 18:50:00 | 2020-12-24 15:15:00 |
| CVE-2020-9137 | 4.6 | There is a privilege escalation vulnerability in some versions of CloudEngine 12800,CloudEngine 5800,CloudEngine 6800 and CloudEngine 7800. Due to insufficient input validation, a local attacker with high privilege may execute some specially crafted | 2020-12-28 18:46:00 | 2020-12-24 16:15:00 |
| CVE-2020-27721 | 4.3 | In versions 16.0.0-16.0.0.1, 15.1.0-15.1.1, 14.1.0-14.1.3, 13.1.0-13.1.3.5, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, in a BIG-IP DNS / BIG-IP LTM GSLB deployment, under certain circumstances, the BIG-IP DNS system may stop using a BIG-IP LTM virtual ser | 2020-12-28 18:42:00 | 2020-12-24 15:15:00 |
| CVE-2020-5684 | 5.8 | iSM client versions from V5.1 prior to V12.1 running on NEC Storage Manager or NEC Storage Manager Express does not verify a server certificate properly, which allows a man-in-the-middle attacker to eavesdrop on an encrypted communication or alter th | 2020-12-28 18:25:00 | 2020-12-24 02:15:00 |
| CVE-2020-35705 | 3.5 | Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen. | 2020-12-28 18:20:00 | 2020-12-25 06:15:00 |
| CVE-2020-35668 | 5.0 | RedisGraph 2.x through 2.2.11 has a NULL Pointer Dereference that leads to a server crash because it mishandles an unquoted string, such as an alias that has not yet been introduced. | 2020-12-28 18:11:00 | 2020-12-23 23:15:00 |
| CVE-2020-35676 | 4.3 | BigProf Online Invoicing System before 3.1 fails to correctly sanitize an XSS payload when a user registers using the self-registration functionality. As such, an attacker can input a crafted payload that will execute upon the application's administr | 2020-12-28 17:42:00 | 2020-12-24 04:15:00 |
| CVE-2020-35659 | 4.3 | The DNS query log in Pi-hole before 5.2.2 is vulnerable to stored XSS. An attacker with the ability to directly or indirectly query DNS with a malicious hostname can cause arbitrary JavaScript to execute when the Pi-hole administrator visits the Quer | 2020-12-28 17:40:00 | 2020-12-24 16:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: