| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2017-12735 | 5.8 | A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). An attacker who performs a Man-in-the-Middle attack between the LOGO! BM and other devices could potentially decrypt and modify network traffic. | 2020-12-23 18:29:00 | 2017-08-30 19:29:00 |
| CVE-2020-7589 | 6.4 | A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions). The vulnerability could lead to an attacker reading and modifying the device configuration and obtain project files from affected devices. The security vulnerab | 2020-12-23 18:28:00 | 2020-06-10 17:15:00 |
| CVE-2020-7662 | 5.0 | websocket-extensions npm module prior to 0.1.4 allows Denial of Service (DoS) via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-by | 2020-12-23 18:22:00 | 2020-06-02 19:15:00 |
| CVE-2020-29596 | 5.0 | MiniWeb HTTP server 0.8.19 allows remote attackers to cause a denial of service (daemon crash) via a long name for the first parameter in a POST request. | 2020-12-23 18:13:00 | 2020-12-21 22:15:00 |
| CVE-2020-35650 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in Uncanny Groups for LearnDash before v3.7 allow authenticated remote attackers to inject arbitrary JavaScript or HTML via the ulgm_code_redeem POST Parameter in user-code-redemption.php, the ulgm_ | 2020-12-23 17:48:00 | 2020-12-23 16:15:00 |
| CVE-2020-15889 | 7.5 | Lua 5.4.0 has a getobjname heap-based buffer over-read because youngcollection in lgc.c uses markold for an insufficient number of list members. | 2020-12-23 17:41:00 | 2020-07-21 22:15:00 |
| CVE-2020-35608 | 7.2 | A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07. A specially crafted AF_PACKET socket can cause a process to create an executable memory mapping with controllable content | 2020-12-23 17:19:00 | 2020-12-22 20:15:00 |
| CVE-2019-11781 | 6.8 | Improper input validation in portal component in Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier, allows remote attackers to trick victims into modifying their account via crafted links, leading to privilege escalation. | 2020-12-23 17:06:00 | 2020-12-22 17:15:00 |
| CVE-2020-26277 | 4.0 | DBdeployer is a tool that deploys MySQL database servers easily. In DBdeployer before version 1.58.2, users unpacking a tarball may use a maliciously packaged tarball that contains symlinks to files external to the target. In such scenario, an attack | 2020-12-23 16:24:00 | 2020-12-21 22:15:00 |
| CVE-2020-26263 | 5.0 | tlslite-ng is an open source python library that implements SSL and TLS cryptographic protocols. In tlslite-ng before versions 0.7.6 and 0.8.0-alpha39, the code that performs decryption and padding check in RSA PKCS#1 v1.5 decryption is data dependan | 2020-12-23 16:09:00 | 2020-12-21 17:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: