| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-16955 | 3.5 | SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request. | 2020-12-18 14:15:00 | 2020-12-18 09:15:00 |
| CVE-2020-26274 | 7.5 | In systeminformation (npm package) before version 4.31.1 there is a command injection vulnerability. The problem was fixed in version 4.31.1 with a shell string sanitation fix. | 2020-12-18 14:04:00 | 2020-12-16 20:15:00 |
| CVE-2020-25617 | 9.0 | An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows Relative Path Traversal by an authenticated user of the N-Central Administration Console (NAC), leading to execution of OS commands as root. | 2020-12-18 13:56:00 | 2020-12-16 14:15:00 |
| CVE-2020-8936 | 2.1 | An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to UntrustedCall. UntrustedCall failed to validate the buffer range within sgx_params and allowed the host to return a pointer that was a | 2020-12-18 02:49:00 | 2020-12-15 15:15:00 |
| CVE-2020-15796 | 5.0 | A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) (V20.8), SIMATIC S7-1500 Software Controller (V20.8). The web server of the affected products contains a vulnerability that could allow a remote attacker | 2020-12-18 02:35:00 | 2020-12-14 21:15:00 |
| CVE-2018-16792 | 6.4 | SolarWinds SFTP/SCP server through 2018-09-10 is vulnerable to XXE via a world readable and writable configuration file that allows an attacker to exfiltrate data. | 2020-12-18 02:15:00 | 2018-12-05 22:29:00 |
| CVE-2019-5453 | 3.6 | Bypass lock protection in the Nextcloud Android app prior to version 3.3.0 allowed access to files when being prompted for the lock protection and switching to the Nextcloud file provider. | 2020-12-18 02:09:00 | 2019-07-30 21:15:00 |
| CVE-2020-4849 | 5.8 | IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.19 Interim Fix 7 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a vitcim to a phishing site | 2020-12-18 01:53:00 | 2020-12-15 15:15:00 |
| CVE-2019-11776 | 4.3 | In Eclipse BIRT versions 1.0 to 4.7, the Report Viewer allows Reflected XSS in URL parameter. Attacker can execute the payload in victim's browser context. | 2020-12-18 01:50:00 | 2019-08-09 19:15:00 |
| CVE-2020-20142 | - | Cross Site Scripting (XSS) vulnerability in the "To Remote CSV" component under "Open" Menu in Flexmonster Pivot Table & Charts 2.7.17. | 2020-12-18 00:36:00 | 2020-12-17 23:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: