| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-4657 | 4.3 | IBM Sterling B2B Integrator 5.2.0.0 through 6.0.3.2 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading | 2020-12-17 19:19:00 | 2020-12-16 21:15:00 |
| CVE-2020-4658 | 4.3 | IBM Sterling File Gateway 2.2.0.0 through 6.0.3.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disc | 2020-12-17 19:17:00 | 2020-12-16 21:15:00 |
| CVE-2020-8941 | 2.1 | An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_inet_pton using an attacker controlled klinux_addr_buffer parameter. The parameter size is unchecked allowing the attack | 2020-12-17 19:05:00 | 2020-12-15 15:15:00 |
| CVE-2020-8283 | 9.0 | An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9 | 2020-12-17 18:45:00 | 2020-12-14 20:15:00 |
| CVE-2020-8942 | 2.1 | An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_read whose return size was not validated against the requrested size. The parameter size is unchecked allowing the attac | 2020-12-17 18:44:00 | 2020-12-15 15:15:00 |
| CVE-2020-35469 | 10.0 | The Software AG Terracotta Server OSS Docker image 5.4.1 contains a blank password for the root user. Systems deployed using affected versions of the Terracotta Server OSS container may allow a remote attacker to achieve root access with a blank pass | 2020-12-17 18:37:00 | 2020-12-16 00:15:00 |
| CVE-2020-8944 | 2.1 | An arbitrary memory write vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to ecall_restore using the attribute output which fails to check the range of a pointer. An attacker can use this pointer to write to ar | 2020-12-17 18:20:00 | 2020-12-15 15:15:00 |
| CVE-2020-8943 | 2.1 | An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvfrom whose return size was not validated against the requested size. The parameter size is unchecked allowing the at | 2020-12-17 18:13:00 | 2020-12-15 15:15:00 |
| CVE-2018-16243 | 3.5 | SolarWinds Database Performance Analyzer (DPA) 11.1.468 and 12.0.3074 have several persistent XSS vulnerabilities, related to logViewer.iwc, centralManage.cen, userAdministration.iwc, database.iwc, alertManagement.iwc, eventAnnotations.iwc, and centr | 2020-12-17 18:05:00 | 2020-12-15 23:15:00 |
| CVE-2020-8940 | 2.1 | An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvmsg using an attacker controlled result parameter. The parameter size is unchecked allowing the attacker to read mem | 2020-12-17 17:25:00 | 2020-12-15 15:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: