| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-35187 | - | The official telegraf docker images before 1.9.4-alpine (Alpine specific) contain a blank password for a root user. System using the telegraf docker container deployed by affected versions of the docker image may allow a remote attacker to achieve ro | 2020-12-17 03:03:00 | 2020-12-17 01:15:00 |
| CVE-2020-27050 | 6.8 | In rw_i93_send_cmd_write_multi_blocks of rw_i93.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for | 2020-12-17 03:03:00 | 2020-12-15 17:15:00 |
| CVE-2020-27067 | 4.4 | In the l2tp subsystem, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: And | 2020-12-17 02:48:00 | 2020-12-15 17:15:00 |
| CVE-2020-27055 | 5.0 | In isSubmittable and showWarningMessagesIfAppropriate of WifiConfigController.java and WifiConfigController2.java, there is a possible insecure WiFi configuration due to improper input validation. This could lead to remote information disclosure with | 2020-12-17 02:20:00 | 2020-12-15 17:15:00 |
| CVE-2020-25712 | 4.6 | A flaw was found in xorg-x11-server before 1.20.10. A heap-buffer overflow in XkbSetDeviceInfo may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system ava | 2020-12-16 21:42:00 | 2020-12-15 17:15:00 |
| CVE-2020-28457 | 3.5 | This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS. | 2020-12-16 21:30:00 | 2020-12-15 16:15:00 |
| CVE-2020-35395 | 4.3 | XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field | 2020-12-16 21:10:00 | 2020-12-15 16:15:00 |
| CVE-2020-35396 | 4.3 | EGavilan Barcodes generator 1.0 is affected by: Cross Site Scripting (XSS) via the index.php. An Attacker is able to inject the XSS payload in the web application each time a user visits the website. | 2020-12-16 20:30:00 | 2020-12-15 16:15:00 |
| CVE-2020-16104 | 6.5 | SQL Injection vulnerability in Enterprise Data Interface of Gallagher Command Centre allows a remote attacker with 'Edit Enterprise Data Interfaces' privilege to execute arbitrary SQL against a third party database if EDI is configured to import data | 2020-12-16 19:46:00 | 2020-12-14 20:15:00 |
| CVE-2020-14244 | 10.0 | A vulnerability in the MIME message handling of the Domino server (versions 9 and 10) could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the server or inject | 2020-12-16 19:46:00 | 2020-12-14 16:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: