| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-0494 | 4.3 | In ih264d_parse_ave of ih264d_sei.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Pr | 2020-12-15 19:48:00 | 2020-12-15 16:15:00 |
| CVE-2020-0492 | 4.3 | In BitstreamFillCache of bitstream.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation | 2020-12-15 19:48:00 | 2020-12-15 16:15:00 |
| CVE-2020-14268 | 10.0 | A vulnerability in the MIME message handling of the Notes client (versions 9 and 10) could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the client or inject | 2020-12-15 19:47:00 | 2020-12-14 16:15:00 |
| CVE-2020-5637 | 5.2 | Improper validation of integrity check value vulnerability in Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker with an administrative privilege to execute a malicious program. | 2020-12-15 19:17:00 | 2020-12-14 03:15:00 |
| CVE-2020-5636 | 5.2 | Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker with an administrative privilege to send a specially crafted request to a specific URL, which may result in an arbitrary command execution. | 2020-12-15 19:00:00 | 2020-12-14 03:15:00 |
| CVE-2020-25889 | 7.5 | Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injection payload on the login page attackers can bypass the authentication and can gain the admin privilege. | 2020-12-15 18:30:00 | 2020-12-08 13:15:00 |
| CVE-2020-5635 | 5.8 | Aterm SA3500G firmware versions prior to Ver. 3.5.9 allows an attacker on the adjacent network to send a specially crafted request to a specific URL, which may result in an arbitrary command execution. | 2020-12-15 18:01:00 | 2020-12-14 03:15:00 |
| CVE-2020-29591 | 10.0 | Versions of the Official registry Docker images through 2.7.0 contain a blank password for the root user. Systems deployed using affected versions of the registry container may allow a remote attacker to achieve root access with a blank password. | 2020-12-15 17:39:00 | 2020-12-11 15:15:00 |
| CVE-2020-29304 | 4.3 | A cross-site scripting (XSS) vulnerability exists in the SabaiApps WordPress Directories Pro plugin version 1.3.45 and previous, allows attackers who have convinced a site administrator to import a specially crafted CSV file to inject arbitrary web s | 2020-12-15 16:49:00 | 2020-12-14 20:15:00 |
| CVE-2020-29303 | 4.3 | A cross-site scripting (XSS) vulnerability in the SabaiApp Directories Pro plugin 1.3.45 for WordPress allows remote attackers to inject arbitrary web script or HTML via a POST to /wp-admin/admin.php?page=drts/directories&q=%2F with _drts_form_build_ | 2020-12-15 16:48:00 | 2020-12-14 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: