| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-35197 | 10.0 | The official memcached docker images before 1.5.11-alpine (Alpine specific) contain a blank password for a root user. System using the memcached docker container deployed by affected versions of the docker image may allow a remote attacker to achieve | 2020-12-22 13:00:00 | 2020-12-17 02:15:00 |
| CVE-2020-35196 | 10.0 | The official rabbitmq docker images before 3.7.13-beta.1-management-alpine (Alpine specific) contain a blank password for a root user. System using the rabbitmq docker container deployed by affected versions of the docker image may allow a remote att | 2020-12-22 12:59:00 | 2020-12-17 02:15:00 |
| CVE-2020-35489 | 10.0 | The contact-form-7 (aka Contact Form 7) plugin before 5.3.2 for WordPress allows Unrestricted File Upload and remote code execution because a filename may contain special characters. | 2020-12-22 12:57:00 | 2020-12-17 19:15:00 |
| CVE-2020-15293 | 2.1 | Memory corruption in IntLixCrashDumpDmesg, IntLixTaskFetchCmdLine, IntLixFileReadDentry and IntLixFileGetPath due to insufficient guest-data input validation may lead to denial of service conditions. | 2020-12-22 12:47:00 | 2020-12-17 17:15:00 |
| CVE-2020-35626 | - | An issue was discovered in the PushToWatch extension for MediaWiki through 1.35.1. The primary form did not implement an anti-CSRF token and therefore was completely vulnerable to CSRF attacks against onSkinAddFooterLinks in PushToWatch.php. | 2020-12-22 04:33:00 | 2020-12-21 23:15:00 |
| CVE-2020-35624 | - | An issue was discovered in the SecurePoll extension for MediaWiki through 1.35.1. The non-admin vote list contains a full vote timestamp, which may provide unintended clues about how a voting process unfolded. | 2020-12-22 04:33:00 | 2020-12-21 23:15:00 |
| CVE-2020-35622 | - | An issue was discovered in the GlobalUsage extension for MediaWiki through 1.35.1. SpecialGlobalUsage.php calls WikiMap::makeForeignLink unsafely. The $page variable within the formatItem function was not being properly escaped, allowing for XSS unde | 2020-12-22 04:33:00 | 2020-12-21 23:15:00 |
| CVE-2020-8995 | - | Programi Bilanc Build 007 Release 014 31.01.2020 supplies a .exe file containing several hardcoded credentials to different servers that allow remote attackers to gain access to the complete infrastructure including the website, update server, and ex | 2020-12-22 04:33:00 | 2020-12-21 22:15:00 |
| CVE-2020-11717 | - | An issue was discovered in Programi 014 31.01.2020. It has multiple SQL injection vulnerabilities. | 2020-12-22 04:33:00 | 2020-12-21 21:15:00 |
| CVE-2020-29579 | 10.0 | The official Express Gateway Docker images before 1.14.0 contain a blank password for a root user. Systems using the Express Gateway Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root acces | 2020-12-22 04:32:00 | 2020-12-08 16:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: