| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-35192 | 10.0 | The official vault docker images before 0.11.6 contain a blank password for a root user. System using the vault docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank passwor | 2020-12-18 16:49:00 | 2020-12-17 02:15:00 |
| CVE-2020-29436 | 5.5 | Sonatype Nexus Repository Manager 3.x before 3.29.0 allows a user with admin privileges to configure the system to gain access to content outside of NXRM via an XXE vulnerability. Fixed in version 3.29.0. | 2020-12-18 16:42:00 | 2020-12-17 02:15:00 |
| CVE-2020-14302 | 4.0 | A flaw was found in Keycloak before 13.0.0 where an external identity provider, after successful authentication, redirects to a Keycloak endpoint that accepts multiple invocations with the use of the same "state" parameter. This flaw allows a malicio | 2020-12-18 16:19:00 | 2020-12-15 20:15:00 |
| CVE-2020-29663 | 6.4 | Icinga 2 v2.8.0 through v2.11.7 and v2.12.2 has an issue where revoked certificates due for renewal will automatically be renewed, ignoring the CRL. This issue is fixed in Icinga 2 v2.11.8 and v2.12.3. | 2020-12-18 16:10:00 | 2020-12-15 23:15:00 |
| CVE-2020-35467 | 10.0 | The Docker Docs Docker image through 2020-12-14 contains a blank password for the root user. Systems deployed using affected versions of the Docker Docs container may allow a remote attacker to achieve root access with a blank password. | 2020-12-18 16:01:00 | 2020-12-15 23:15:00 |
| CVE-2020-26273 | 3.6 | osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. In osquery before version 4.6.0, by using sqlite's ATTACH verb, someone with administrative access to osquery can cause reads and writes to arbitrary sqli | 2020-12-18 15:59:00 | 2020-12-16 02:15:00 |
| CVE-2019-14476 | 4.0 | AdRem NetCrunch 10.6.0.4587 has a Server-Side Request Forgery (SSRF) vulnerability in the NetCrunch server. Every user can trick the server into performing SMB requests to other systems. | 2020-12-18 15:41:00 | 2020-12-16 17:15:00 |
| CVE-2020-25195 | 7.8 | The length of the input fields of Host Engineering H0-ECOM100, H2-ECOM100, and H4-ECOM100 modules are verified only on the client side when receiving input from the configuration web server, which may allow an attacker to bypass the check and send in | 2020-12-18 14:59:00 | 2020-12-15 20:15:00 |
| CVE-2020-5683 | 5.0 | Directory traversal vulnerability in GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Series), and GROWI v3 series and earlier GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior to v4.1.12 (v4.1 Seri | 2020-12-18 14:58:00 | 2020-12-16 08:15:00 |
| CVE-2019-16957 | 3.5 | SolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account. | 2020-12-18 14:15:00 | 2020-12-18 09:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: