| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-14225 | 4.3 | HCL iNotes is susceptible to a Tabnabbing vulnerability caused by improper sanitization of message content. A remote unauthenticated attacker could use this vulnerability to trick the end user into entering sensitive information such as credentials, | 2020-12-23 16:04:00 | 2020-12-21 18:15:00 |
| CVE-2020-5803 | 8.5 | Relative Path Traversal in Marvell QConvergeConsole GUI 5.5.0.74 allows a remote, authenticated attacker to delete arbitrary files on disk as SYSTEM or root. | 2020-12-23 15:45:00 | 2020-12-18 21:15:00 |
| CVE-2020-12522 | 10.0 | The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 (750-81xx/xxx-xxx), Series PFC 200 (750-82xx/xxx-xxx), Series Wago Touch Panel 600 Standard Line | 2020-12-23 15:45:00 | 2020-12-17 23:15:00 |
| CVE-2020-13821 | 3.5 | An issue was discovered in HiveMQ Broker Control Center 4.3.2. A crafted clientid parameter in an MQTT packet (sent to the Broker) is reflected in the client section of the management console. The attacker's JavaScript is loaded in a browser, which c | 2020-12-23 15:43:00 | 2020-08-26 16:15:00 |
| CVE-2020-14248 | 5.0 | BigFix Inventory up to v10.0.2 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie. | 2020-12-23 15:32:00 | 2020-12-16 15:15:00 |
| CVE-2018-15645 | 4.0 | Improper access control in message routing in Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier allows remote authenticated users to create arbitrary records via crafted payloads, which may allow privilege escalation. | 2020-12-23 15:23:00 | 2020-12-22 17:15:00 |
| CVE-2007-4045 | 5.0 | The CUPS service, as used in SUSE Linux before 20070720 and other Linux distributions, allows remote attackers to cause a denial of service via unspecified vectors related to an incomplete fix for CVE-2007-0720 that introduced a different denial of s | 2020-12-23 15:20:00 | 2007-07-27 22:30:00 |
| CVE-2010-3702 | 7.5 | The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) via unkn | 2020-12-23 15:01:00 | 2010-11-05 18:00:00 |
| CVE-2020-35657 | - | Jaws through 1.8.0 allows remote authenticated administrators to execute arbitrary code via crafted use of UploadTheme to upload a theme ZIP archive containing a .php file that is able to execute OS commands. NOTE: this is unrelated to the JAWS (aka | 2020-12-23 04:19:00 | 2020-12-23 03:15:00 |
| CVE-2020-35656 | - | Jaws through 1.8.0 allows remote authenticated administrators to execute arbitrary code via crafted use of admin.php?reqGadget=Components&reqAction=InstallGadget&comp=FileBrowser and admin.php?reqGadget=FileBrowser&reqAction=Files to upload a .php fi | 2020-12-23 04:19:00 | 2020-12-23 03:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: