| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-15294 | 4.4 | Compiler Optimization Removal or Modification of Security-critical Code vulnerability in IntPeParseUnwindData() results in multiple dereferences to the same pointer. If the pointer is located in memory-mapped from the guest space, this may cause a ra | 2020-12-22 20:41:00 | 2020-12-17 17:15:00 |
| CVE-2020-6881 | 5.0 | ZTE E8810/E8820/E8822 series routers have an MQTT DoS vulnerability, which is caused by the failure of the device to verify the validity of abnormal messages. A remote attacker could connect to the MQTT server and send an MQTT exception message to th | 2020-12-22 20:32:00 | 2020-12-21 18:15:00 |
| CVE-2020-26280 | 3.5 | OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies. OpenSlides version 3.2, due to unsufficient user input validation and escaping, it is vulnerable to persistant | 2020-12-22 20:11:00 | 2020-12-18 19:15:00 |
| CVE-2018-15632 | 8.5 | Improper input validation in database creation logic in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to initialize an empty database on which they can connect with default credentials. | 2020-12-22 20:04:00 | 2020-12-22 17:15:00 |
| CVE-2020-35590 | 5.0 | LimitLoginAttempts.php in the limit-login-attempts-reloaded plugin before 2.17.4 for WordPress allows a bypass of (per IP address) rate limits because the X-Forwarded-For header can be forged. When the plugin is configured to accept an arbitrary head | 2020-12-22 20:01:00 | 2020-12-21 07:15:00 |
| CVE-2018-15634 | 4.3 | Cross-site scripting (XSS) issue in attachment management in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim via a crafted link. | 2020-12-22 19:55:00 | 2020-12-22 17:15:00 |
| CVE-2020-29447 | 4.0 | Affected versions of Atlassian Crucible allow remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability in the file upload request feature of code reviews. The affected versions are before version 4.7.4, an | 2020-12-22 19:55:00 | 2020-12-21 01:15:00 |
| CVE-2020-35589 | 3.5 | The limit-login-attempts-reloaded plugin before 2.17.4 for WordPress allows wp-admin/options-general.php?page=limit-login-attempts&tab= XSS. A malicious user can cause an administrator user to supply dangerous content to the vulnerable page, which is | 2020-12-22 19:53:00 | 2020-12-21 07:15:00 |
| CVE-2020-35579 | 5.0 | tindy2013 subconverter 0.6.4 has a /sub?target=%TARGET%&url=%URL%&config=%CONFIG% API endpoint that accepts an arbitrary %URL% value and launches a GET request for it, but does not consider that the external request target may indirectly redirect bac | 2020-12-22 19:49:00 | 2020-12-20 07:15:00 |
| CVE-2018-15633 | 4.3 | Cross-site scripting (XSS) issue in "document" module in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim via crafted attachment filenames. | 2020-12-22 19:48:00 | 2020-12-22 17:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: