| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-7203 | 7.5 | A potential security vulnerability has been identified in HPE iLO Amplifier Pack server version 1.70. The vulnerability could be exploited to allow remote code execution. | 2020-12-21 15:54:00 | 2020-12-18 23:15:00 |
| CVE-2020-26178 | 5.0 | In tangro Business Workflow before 1.18.1, knowing an attachment ID, it is possible to download workitem attachments without being authenticated. | 2020-12-21 14:57:00 | 2020-12-18 10:15:00 |
| CVE-2020-27154 | 6.5 | The chat window of Mitel BusinessCTI Enterprise (MBC-E) Client for Windows before 6.4.11 and 7.x before 7.0.3 could allow an attacker to gain access to user information by sending arbitrary code, due to improper input validation. A successful exploit | 2020-12-21 14:41:00 | 2020-12-18 08:15:00 |
| CVE-2020-25096 | 6.5 | LogRhythm Platform Manager (PM) 7.4.9 has Incorrect Access Control. Users within LogRhythm can be delegated different roles and privileges, intended to limit what data and services they can interact with. However, no access control is enforced for We | 2020-12-21 14:31:00 | 2020-12-17 03:15:00 |
| CVE-2020-25095 | 6.8 | LogRhythm Platform Manager (PM) 7.4.9 allows CSRF. The Web interface is vulnerable to Cross-site WebSocket Hijacking (CSWH). If a logged-in PM user visits a malicious site in the same browser session, that site can perform a CSRF attack to create a W | 2020-12-21 14:31:00 | 2020-12-17 03:15:00 |
| CVE-2020-12523 | 6.4 | On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration. For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by dev | 2020-12-21 14:16:00 | 2020-12-17 23:15:00 |
| CVE-2020-20138 | 4.3 | Cross Site Scripting (XSS) vulnerability in the Showtime2 Slideshow module in CMS Made Simple (CMSMS) 2.2.4. | 2020-12-18 21:20:00 | 2020-12-17 23:15:00 |
| CVE-2020-25609 | 3.5 | The NuPoint Messenger Portal of Mitel MiCollab before 9.2 could allow an authenticated attacker to execute arbitrary scripts due to insufficient input validation, aka XSS. A successful exploit could allow an attacker to view and modify user data. | 2020-12-18 21:18:00 | 2020-12-18 08:15:00 |
| CVE-2020-24693 | 2.1 | The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow a local attacker to view system information due to insufficient output sanitization. | 2020-12-18 19:41:00 | 2020-12-18 08:15:00 |
| CVE-2020-26276 | 6.8 | Fleet is an open source osquery manager. In Fleet before version 3.5.1, due to issues in Go's standard library XML parsing, a valid SAML response may be mutated by an attacker to modify the trusted document. This can result in allowing unverified log | 2020-12-18 19:11:00 | 2020-12-17 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: