| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-20141 | - | Cross Site Scripting (XSS) vulnerability in the To OLAP (XMLA) component Under the Connect menu in Flexmonster Pivot Table & Charts 2.7.17. | 2020-12-18 00:36:00 | 2020-12-17 23:15:00 |
| CVE-2020-20140 | - | Cross Site Scripting (XSS) vulnerability in Remote Report component under the Open menu in Flexmonster Pivot Table & Charts 2.7.17. | 2020-12-18 00:36:00 | 2020-12-17 23:15:00 |
| CVE-2020-20139 | - | Cross Site Scripting (XSS) vulnerability in the Remote JSON component Under the Connect menu in Flexmonster Pivot Table & Charts 2.7.17. | 2020-12-18 00:36:00 | 2020-12-17 23:15:00 |
| CVE-2020-28072 | 6.5 | A Remote Code Execution vulnerability exists in DourceCodester Alumni Management System 1.0. An authenticated attacker can upload arbitrary file in the gallery.php page and executing it on the server reaching the RCE. | 2020-12-17 20:52:00 | 2020-12-15 21:15:00 |
| CVE-2020-35380 | 5.0 | GJSON before 1.6.4 allows attackers to cause a denial of service via crafted JSON. | 2020-12-17 20:45:00 | 2020-12-15 21:15:00 |
| CVE-2019-14477 | 2.1 | AdRem NetCrunch 10.6.0.4587 has Improper Credential Storage since the internal user database is readable by low-privileged users and passwords in the database are weakly encoded or encrypted. | 2020-12-17 20:31:00 | 2020-12-16 16:15:00 |
| CVE-2020-4846 | 4.0 | IBM Security Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. I | 2020-12-17 19:58:00 | 2020-12-17 19:15:00 |
| CVE-2020-4845 | 3.5 | IBM Security Key Lifecycle Manager 3.0.1 and 4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials discl | 2020-12-17 19:58:00 | 2020-12-17 19:15:00 |
| CVE-2020-35468 | 10.0 | The Appbase streams Docker image 2.1.2 contains a blank password for the root user. Systems deployed using affected versions of the streams container may allow a remote attacker to achieve root access with a blank password. | 2020-12-17 19:49:00 | 2020-12-16 00:15:00 |
| CVE-2020-25622 | 6.8 | An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows CSRF. | 2020-12-17 19:36:00 | 2020-12-16 15:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: