| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-35554 | 4.6 | An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. There is a WebView SSL error-handler vulnerability. The LG ID is LVE-SMP-200026 (December 2020). | 2020-12-21 21:40:00 | 2020-12-18 09:15:00 |
| CVE-2020-27010 | 3.5 | A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to tamper with the web interface of the product in a manner separate from the similar CVE-2020-8462. | 2020-12-21 21:33:00 | 2020-12-17 21:15:00 |
| CVE-2020-8462 | 3.5 | A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to tamper with the web interface of the product. | 2020-12-21 21:27:00 | 2020-12-17 21:15:00 |
| CVE-2020-8461 | 6.8 | A CSRF protection bypass vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to get a victim's browser to send a specifically encoded request without requiring a valid CSRF token. | 2020-12-21 21:25:00 | 2020-12-17 21:15:00 |
| CVE-2020-26172 | 6.4 | Every login in tangro Business Workflow before 1.18.1 generates the same JWT token, which allows an attacker to reuse the token when a session is active. The JWT token does not contain an expiration timestamp. | 2020-12-21 21:11:00 | 2020-12-18 10:15:00 |
| CVE-2020-4843 | 4.0 | IBM Security Secret Server 10.6 stores potentially sensitive information in config files that could be read by an authenticated user. IBM X-Force ID: 190048. | 2020-12-21 19:55:00 | 2020-12-21 18:15:00 |
| CVE-2020-4764 | 4.3 | IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 188898. | 2020-12-21 19:43:00 | 2020-12-18 15:15:00 |
| CVE-2020-35545 | 7.5 | Time-based SQL injection exists in Spotweb 1.4.9 via the query string. | 2020-12-21 19:42:00 | 2020-12-17 20:15:00 |
| CVE-2020-35548 | 2.1 | An issue was discovered in Finder on Samsung mobile devices with Q(10.0) software. A call to a non-existent provider allows attackers to cause a denial of service. The Samsung ID is SVE-2020-18629 (December 2020). | 2020-12-21 19:34:00 | 2020-12-18 09:15:00 |
| CVE-2020-35549 | 2.1 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Any application may establish itself as the default dialer, without user interaction. The Samsung ID is SVE-2020-19172 (December 2020). | 2020-12-21 19:22:00 | 2020-12-18 09:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: