| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-11720 | 7.5 | An issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and possibly below. During the installation, it sets up administrative access by default with the account admin and password 0000. After the installation, users/admins are no | 2020-12-23 20:08:00 | 2020-12-23 16:15:00 |
| CVE-2020-28071 | 3.5 | SourceCodester Alumni Management System 1.0 is affected by cross-site Scripting (XSS) in /admin/gallery.php. After the admin authentication an attacker can upload an image in the gallery using a XSS payload in the description textarea called 'about' | 2020-12-23 20:03:00 | 2020-12-23 18:15:00 |
| CVE-2020-28070 | 7.5 | SourceCodester Alumni Management System 1.0 is affected by SQL injection causing arbitrary remote code execution from GET input in view_event.php via the 'id' parameter. | 2020-12-23 20:00:00 | 2020-12-23 18:15:00 |
| CVE-2018-1000893 | 5.0 | Bitcoin SV before 0.1.1 allows uncontrolled resource consumption when deserializing transactions. | 2020-12-23 20:00:00 | 2020-12-23 17:15:00 |
| CVE-2020-28073 | 7.5 | SourceCodester Library Management System 1.0 is affected by SQL Injection allowing an attacker to bypass the user authentication and impersonate any user on the system. | 2020-12-23 19:54:00 | 2020-12-23 18:15:00 |
| CVE-2020-28074 | 7.5 | SourceCodester Online Health Care System 1.0 is affected by SQL Injection which allows a potential attacker to bypass the authentication system and become an admin. | 2020-12-23 19:46:00 | 2020-12-23 18:15:00 |
| CVE-2020-27397 | 6.5 | Marital - Online Matrimonial Project In PHP version 1.0 suffers from an authenticated file upload vulnerability allowing remote attackers to gain remote code execution (RCE) on the Hosting web server via uploading a maliciously crafted PHP file. | 2020-12-23 19:46:00 | 2020-12-23 18:15:00 |
| CVE-2020-35585 | 5.0 | In Solstice Pod before 3.3.0 (or Open4.3), the screen key can be enumerated using brute-force attacks via the /lookin/info Solstice Open Control API because there are only 1.7 million possibilities. | 2020-12-23 19:38:00 | 2020-12-23 15:15:00 |
| CVE-2020-26284 | 8.5 | Hugo is a fast and Flexible Static Site Generator built in Go. Hugo depends on Go's `os/exec` for certain features, e.g. for rendering of Pandoc documents if these binaries are found in the system `%PATH%` on Windows. In Hugo before version 0.79.1, i | 2020-12-23 19:34:00 | 2020-12-21 23:15:00 |
| CVE-2020-35586 | 5.0 | In Solstice Pod before 3.3.0 (or Open4.3), the Administrator password can be enumerated using brute-force attacks via the /Config/service/initModel?password= Solstice Open Control API because there is no complexity requirement (e.g., it might be all | 2020-12-23 19:28:00 | 2020-12-23 15:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: