| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-25231 | 2.1 | A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3). The encryption of program data for the affected devices uses a static key. An attacker could use this key to ex | 2020-12-16 17:57:00 | 2020-12-14 21:15:00 |
| CVE-2020-25232 | 5.0 | A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Due to the usage of an insecure random number generation function and a deprecated cryptographic function, an attacker could extract the key that is used | 2020-12-16 17:44:00 | 2020-12-14 21:15:00 |
| CVE-2020-25233 | 2.1 | A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The firmware update of affected devices contains the private RSA key that is used as a basis for encryption of communication with the device. | 2020-12-16 17:40:00 | 2020-12-14 21:15:00 |
| CVE-2020-35470 | 5.8 | Envoy before 1.16.1 logs an incorrect downstream address because it considers only the directly connected peer, not the information in the proxy protocol header. This affects situations with tcp-proxy as the network filter (not HTTP filters). | 2020-12-16 17:22:00 | 2020-12-15 01:15:00 |
| CVE-2019-14672 | 3.5 | Firefly III 4.7.17.5 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the liability name field. The JavaScript code is executed upon an error condition during a visit to the account show page. | 2020-12-16 17:00:00 | 2019-08-05 20:15:00 |
| CVE-2019-14670 | 3.5 | Firefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the bill name field. The JavaScript code is executed during rule-from-bill creation. | 2020-12-16 17:00:00 | 2019-08-05 20:15:00 |
| CVE-2019-14669 | 3.5 | Firefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the asset account name. The JavaScript code is executed during a visit to the audit account statistics page. | 2020-12-16 17:00:00 | 2019-08-05 20:15:00 |
| CVE-2019-14668 | 3.5 | Firefly III 4.7.17.3 is vulnerable to stored XSS due to the lack of filtration of user-supplied data in the transaction description field. The JavaScript code is executed during deletion of a transaction link. | 2020-12-16 17:00:00 | 2019-08-05 20:15:00 |
| CVE-2019-14667 | 4.3 | Firefly III 4.7.17.4 is vulnerable to multiple stored XSS issues due to the lack of filtration of user-supplied data in the transaction description field and the asset account name. The JavaScript code is executed during a convert transaction action. | 2020-12-16 17:00:00 | 2019-08-05 20:15:00 |
| CVE-2020-35471 | 5.0 | Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500. | 2020-12-16 16:54:00 | 2020-12-15 01:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: