| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-35464 | 10.0 | Version 1.3.0 of the Weave Cloud Agent Docker image contains a blank password for the root user. Systems deployed using affected versions of the Weave Cloud Agent container may allow a remote attacker to achieve root access with a blank password. | 2020-12-17 17:04:00 | 2020-12-15 23:15:00 |
| CVE-2020-35462 | 10.0 | Version 3.16.0 of the CoScale agent Docker image contains a blank password for the root user. Systems deployed using affected versions of the CoScale agent container may allow a remote attacker to achieve root access with a blank password. | 2020-12-17 16:43:00 | 2020-12-15 23:15:00 |
| CVE-2019-14478 | 3.5 | AdRem NetCrunch 10.6.0.4587 has a stored Cross-Site Scripting (XSS) vulnerability in the NetCrunch web client. The user's input data is not properly encoded when being echoed back to the user. This data can be interpreted as executable code by the br | 2020-12-17 16:32:00 | 2020-12-16 17:15:00 |
| CVE-2020-35463 | 10.0 | Version 1.0.0 of the Instana Dynamic APM Docker image contains a blank password for the root user. Systems deployed using affected versions of the Instana Dynamic APM container may allow a remote attacker to achieve root access with a blank password. | 2020-12-17 16:07:00 | 2020-12-15 23:15:00 |
| CVE-2020-7789 | 6.8 | This affects the package node-notifier before 9.0.0. It allows an attacker to run arbitrary commands on Linux machines due to the options params not being sanitised when being passed an array. | 2020-12-17 15:52:00 | 2020-12-11 10:15:00 |
| CVE-2020-28930 | 3.5 | A Cross-Site Scripting (XSS) issue in the 'update user' and 'delete user' functionalities in settings/users.php in EPSON EPS TSE Server 8 (21.0.11) allows an authenticated attacker to inject a JavaScript payload in the user management page that is ex | 2020-12-17 15:33:00 | 2020-12-16 21:15:00 |
| CVE-2020-28931 | 6.8 | Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to force an administrator to execute external POST requests by visiting a malicious website. | 2020-12-17 15:32:00 | 2020-12-16 21:15:00 |
| CVE-2020-23957 | 4.3 | Pega Platform through 8.4.x is affected by Cross Site Scripting (XSS) via the ConnectionID parameter, as demonstrated by a pyActivity=Data-TRACERSettings.pzStartTracerSession request to a PRAuth URI. | 2020-12-17 15:29:00 | 2020-12-15 21:15:00 |
| CVE-2020-4908 | 5.0 | IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 returns the product version and release information on the login dialog. This information could be used in further attacks against the system. | 2020-12-17 15:25:00 | 2020-12-16 21:15:00 |
| CVE-2020-4907 | 5.0 | IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further | 2020-12-17 15:23:00 | 2020-12-16 21:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: