| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-25199 | 6.8 | A heap-based buffer overflow vulnerability exists within the WECON LeviStudioU Release Build 2019-09-21 and prior when processing project files. Opening a specially crafted project file could allow an attacker to exploit and execute code under the pr | 2020-12-16 16:22:00 | 2020-12-09 17:15:00 |
| CVE-2020-28456 | 4.3 | The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting (XSS) via the admin panel. | 2020-12-16 16:01:00 | 2020-12-15 16:15:00 |
| CVE-2020-0244 | 4.3 | In writeBurstBufferBytes of SPDIFEncoder.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no clear exfiltration path, with no additional execution privileges needed. Us | 2020-12-16 15:52:00 | 2020-12-15 16:15:00 |
| CVE-2020-25234 | 3.6 | A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3). The LOGO! program files generated and used by the affected components offer the possibility to save user-define | 2020-12-16 15:48:00 | 2020-12-14 21:15:00 |
| CVE-2020-8282 | 6.8 | A security issue was found in EdgePower 24V/54V firmware v1.7.0 and earlier where, due to missing CSRF protections, an attacker would have been able to perform unauthorized remote code execution. | 2020-12-16 15:41:00 | 2020-12-14 20:15:00 |
| CVE-2020-8258 | 5.0 | Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, allows an attacker to modify arbitrary files. | 2020-12-16 15:39:00 | 2020-12-14 20:15:00 |
| CVE-2020-25235 | 5.0 | A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The password used for authentication for the LOGO! Website and the LOGO! Access Tool is sent in a recoverable format. An attacker with access to the netw | 2020-12-16 15:38:00 | 2020-12-14 21:15:00 |
| CVE-2020-8257 | 7.5 | Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, lead to privilege escalation attacks | 2020-12-16 15:38:00 | 2020-12-14 20:15:00 |
| CVE-2020-0476 | 2.1 | In onNotificationRemoved of Assistant.java, there is a possible leak of sensitive information to logs. This could lead to local information disclosure with System execution privileges required. User interaction is not needed for exploitation.Product: | 2020-12-16 15:25:00 | 2020-12-15 16:15:00 |
| CVE-2020-28442 | 7.5 | All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn function. | 2020-12-16 15:20:00 | 2020-12-15 08:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: