| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-6159 | 4.3 | URLs using “javascript:” have the protocol removed when pasted into the address bar to protect users from cross-site scripting (XSS) attacks, but in certain circumstances this removal was not performed. This could allow users to be socially engineere | 2020-12-23 19:27:00 | 2020-12-23 16:15:00 |
| CVE-2020-9439 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in Uncanny Owl Tin Canny LearnDash Reporting before 3.4.4 allows authenticated remote attackers to inject arbitrary web script or HTML via the search_key GET Parameter in TinCan_Content_List_Table.p | 2020-12-23 19:24:00 | 2020-12-23 16:15:00 |
| CVE-2020-13968 | 7.5 | CRK Business Platform <= 2019.1 allows can inject SQL statements against the DB on any path using the 'strSessao' parameter. | 2020-12-23 19:23:00 | 2020-12-23 18:15:00 |
| CVE-2020-13969 | 4.3 | CRK Business Platform <= 2019.1 allows reflected XSS via erro.aspx on 'CRK', 'IDContratante', 'Erro', or 'Mod' parameter. This is path-independent. | 2020-12-23 19:21:00 | 2020-12-23 18:15:00 |
| CVE-2020-25153 | 5.0 | The built-in web service for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower does not require users to have strong passwords. | 2020-12-23 19:14:00 | 2020-12-23 15:15:00 |
| CVE-2020-25190 | 5.0 | The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower stores and transmits the credentials of third-party services in cleartext. | 2020-12-23 19:13:00 | 2020-12-23 15:15:00 |
| CVE-2020-28641 | 6.6 | In Malwarebytes Free 4.1.0.56, a symbolic link may be used delete an arbitrary file on the system by exploiting the local quarantine system. | 2020-12-23 18:57:00 | 2020-12-22 23:15:00 |
| CVE-2020-25198 | 6.8 | The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has incorrectly implemented protections from session fixation, which may allow an attacker to gain access to a session and hijack it by stealing the user’s cookies. | 2020-12-23 18:55:00 | 2020-12-23 15:15:00 |
| CVE-2020-15644 | 9.0 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypas | 2020-12-23 18:51:00 | 2020-08-25 21:15:00 |
| CVE-2020-25196 | 5.0 | The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows SSH/Telnet sessions, which may be vulnerable to brute force attacks to bypass authentication. | 2020-12-23 18:47:00 | 2020-12-23 15:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: