| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-8938 | 2.1 | An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to FromkLinuxSockAddr with attacker controlled content and size of klinux_addr which allows an attacker to write memory values from withi | 2020-12-17 15:22:00 | 2020-12-15 15:15:00 |
| CVE-2020-4906 | 2.1 | IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 allows web pages to be stored locally which can be read by another user on the system. | 2020-12-17 15:21:00 | 2020-12-16 21:15:00 |
| CVE-2020-4904 | 4.3 | IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. | 2020-12-17 15:21:00 | 2020-12-16 21:15:00 |
| CVE-2020-8937 | 2.1 | An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to enc_untrusted_create_wait_queue that uses a pointer queue that relies on UntrustedLocalMemcpy, which fails to validate where the point | 2020-12-17 14:45:00 | 2020-12-15 15:15:00 |
| CVE-2019-14481 | 5.8 | AdRem NetCrunch 10.6.0.4587 has a Cross-Site Request Forgery (CSRF) vulnerability in the NetCrunch web client. Successful exploitation requires a logged-in user to open a malicious page and leads to account takeover. | 2020-12-17 14:32:00 | 2020-12-16 17:15:00 |
| CVE-2019-14482 | 10.0 | AdRem NetCrunch 10.6.0.4587 has a hardcoded SSL private key vulnerability in the NetCrunch web client. The same hardcoded SSL private key is used across different customers' installations when no other SSL certificate is installed, which allows remot | 2020-12-17 14:32:00 | 2020-12-16 16:15:00 |
| CVE-2020-8939 | 2.1 | An out of bounds read on the enc_untrusted_inet_ntop function allows an attack to extend the result size that is used by memcpy() to read memory from within the enclave heap. We recommend upgrading past commit 6ff3b77ffe110a33a2f93848a6333f33616f02c4 | 2020-12-17 14:04:00 | 2020-12-15 15:15:00 |
| CVE-2020-4747 | 7.5 | IBM Connect:Direct for UNIX 6.1.0, 6.0.0, 4.3.0, and 4.2.0 can allow a local or remote user to obtain an authenticated CLI session due to improper authentication methods. IBM X-Force ID: 188516. | 2020-12-17 13:50:00 | 2020-12-15 15:15:00 |
| CVE-2020-35122 | 4.0 | An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could bypass the access controls for using a saved database connection profile to submit arbitrary SQL against a saved database connection | 2020-12-17 03:30:00 | 2020-12-15 23:15:00 |
| CVE-2020-35186 | - | The official adminer docker images before 4.7.0-fastcgi contain a blank password for a root user. System using the adminer docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a bl | 2020-12-17 03:03:00 | 2020-12-17 02:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: