| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-2504 | 5.0 | If exploited, this absolute path traversal vulnerability could allow attackers to traverse files in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later. | 2020-12-28 15:31:00 | 2020-12-24 02:15:00 |
| CVE-2020-2505 | 2.1 | If exploited, this vulnerability could allow attackers to gain sensitive information via generation of error messages. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later. | 2020-12-28 14:42:00 | 2020-12-24 02:15:00 |
| CVE-2008-4080 | 6.8 | SQL injection vulnerability in Stash 1.0.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the (1) username parameter to admin/library/authenticate.php and the (2) download parameter to downloadmp3.ph | 2020-12-28 09:15:00 | 2008-09-15 15:14:00 |
| CVE-2018-19585 | 5.0 | GitLab CE/EE versions 8.18 up to 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1 have CRLF Injection in Project Mirroring when using the Git protocol. | 2020-12-24 19:15:00 | 2019-05-17 16:29:00 |
| CVE-2006-1681 | 4.3 | Cross-site scripting (XSS) vulnerability in Cherokee HTTPD 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a malformed request that generates an HTTP 400 error, which is not properly handled when the error message i | 2020-12-23 22:15:00 | 2006-04-11 00:02:00 |
| CVE-2020-35666 | 6.5 | Steedos Platform through 1.21.24 allows NoSQL injection because the /api/collection/findone implementation in server/packages/steedos_base.js mishandles req.body validation, as demonstrated by MongoDB operator attacks such as an X-User-Id[$ne]=1 valu | 2020-12-23 20:29:00 | 2020-12-23 20:15:00 |
| CVE-2020-35252 | 4.3 | Cross Site Scripting (XSS) vulnerability via the 'Full Name' parameter in the User Registration section of User Registration & Login System with Admin Panel 1.0. | 2020-12-23 20:18:00 | 2020-12-23 19:15:00 |
| CVE-2018-1000892 | 5.0 | Bitcoin SV before 0.1.1 allows uncontrolled resource consumption when receiving sendheaders messages. | 2020-12-23 20:10:00 | 2020-12-23 17:15:00 |
| CVE-2018-1000891 | 5.0 | Bitcoin SV before 0.1.1 allows uncontrolled resource consumption when receiving messages with invalid checksums. | 2020-12-23 20:10:00 | 2020-12-23 17:15:00 |
| CVE-2020-11718 | 5.8 | An issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and below. Its software-update packages are downloaded via cleartext HTTP. | 2020-12-23 20:09:00 | 2020-12-23 16:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: