| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-15638 | 3.5 | Cross-site scripting (XSS) issue in mail module in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim via crafted channel names. | 2020-12-22 19:46:00 | 2020-12-22 17:15:00 |
| CVE-2018-15641 | 3.5 | Cross-site scripting (XSS) issue in web module in Odoo Community 11.0 through 14.0 and Odoo Enterprise 11.0 through 14.0, allows remote authenticated internal users to inject arbitrary web script in the browser of a victim via crafted calendar event | 2020-12-22 19:40:00 | 2020-12-22 17:15:00 |
| CVE-2020-27254 | 5.0 | Emerson Rosemount X-STREAM Gas AnalyzerX-STREAM enhanced XEGP, XEGK, XEFD, XEXF – all revisions, The affected products are vulnerable to improper authentication for accessing log and backup data, which could allow an attacker with a specially crafted | 2020-12-22 19:30:00 | 2020-12-21 18:15:00 |
| CVE-2020-26251 | 4.3 | Open Zaak is a modern, open-source data- and services-layer to enable zaakgericht werken, a Dutch approach to case management. In Open Zaak before version 1.3.3 the Cross-Origin-Resource-Sharing policy in Open Zaak is currently wide open - every clie | 2020-12-22 19:30:00 | 2020-12-18 18:15:00 |
| CVE-2020-20276 | 7.5 | An unauthenticated stack-based buffer overflow vulnerability in common.c's handle_PORT in uftpd FTP server versions 2.10 and earlier can be abused to cause a crash and could potentially lead to remote code execution. | 2020-12-22 18:44:00 | 2020-12-18 19:15:00 |
| CVE-2020-20285 | 3.5 | There is a XSS in the user login page in zzcms 2019. Users can inject js code by the referer header via user/login.php | 2020-12-22 18:40:00 | 2020-12-18 19:15:00 |
| CVE-2020-8464 | 5.0 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to send requests that appear to come from the localhost which could expose the product's admin interface to users who would not normally have acce | 2020-12-22 17:32:00 | 2020-12-17 21:15:00 |
| CVE-2020-25010 | 7.5 | An arbitrary code execution vulnerability in Kyland KPS2204 6 Port Managed Din-Rail Programmable Serial Device Servers Software Version:R0002.P05 allows remote attackers to upload a malicious script file by constructing a POST type request and writin | 2020-12-22 17:32:00 | 2020-12-17 04:15:00 |
| CVE-2020-35123 | 4.0 | In Zimbra Collaboration Suite Network Edition versions < 9.0.0 P10 and 8.8.15 P17, there exists an XXE vulnerability in the saml consumer store extension, which is vulnerable to XXE attacks. This has been fixed in Zimbra Collaboration Suite Network e | 2020-12-22 17:26:00 | 2020-12-17 04:15:00 |
| CVE-2020-27199 | 5.0 | The Magic Home Pro application 1.5.1 for Android allows Authentication Bypass. The security control that the application currently has in place is a simple Username and Password authentication function. Using enumeration, an attacker is able to forge | 2020-12-22 17:22:00 | 2020-12-17 05:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: