| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-17438 | 7.5 | An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that reassembles fragmented packets fails to properly validate the total length of an incoming packet specified in its IP header, as well as the fragmentation off | 2020-12-15 16:34:00 | 2020-12-11 23:15:00 |
| CVE-2020-20189 | 7.5 | SQL Injection vulnerability in NewPK 1.1 via the title parameter to admin\newpost.php. | 2020-12-15 16:33:00 | 2020-12-14 21:15:00 |
| CVE-2020-17511 | 4.0 | In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logged in plain text in the Log table in Airflow Metadatase. Same happened when creating a Connection with a password field. | 2020-12-15 15:48:00 | 2020-12-14 10:15:00 |
| CVE-2020-29227 | 7.5 | An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, to cause local file inclusion resulting in code exec | 2020-12-15 15:43:00 | 2020-12-14 14:15:00 |
| CVE-2020-17513 | 5.0 | In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable for SSRF attack. | 2020-12-15 15:40:00 | 2020-12-14 10:15:00 |
| CVE-2020-17439 | 7.5 | An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets does not validate that the incoming DNS replies match outgoing DNS queries in newdata() in resolv.c. Also, arbitrary DNS replies | 2020-12-15 15:36:00 | 2020-12-11 23:15:00 |
| CVE-2020-17440 | 5.0 | An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets does not validate that domain names present in the DNS responses have '\0' termination. This results in errors when calculating t | 2020-12-15 15:06:00 | 2020-12-11 23:15:00 |
| CVE-2020-24334 | 6.4 | The code that processes DNS responses in uIP through 1.0, as used in Contiki and Contiki-NG, does not check whether the number of responses specified in the DNS packet header corresponds to the response data available in the DNS packet, leading to an | 2020-12-15 15:03:00 | 2020-12-11 23:15:00 |
| CVE-2020-28838 | 3.5 | Cross Site Request Forgery (CSRF) in CART option in OpenCart Ltd. Opencart CMS 3.0.3.6 allows attacker to add cart items via Add to cart. | 2020-12-15 14:49:00 | 2020-12-11 15:15:00 |
| CVE-2020-24336 | 7.5 | An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5. The code for parsing Type A domain name answers in ip64-dns64.c doesn't verify whether the address in the answer's length is sane. Therefore, when copying an address of an arb | 2020-12-15 14:47:00 | 2020-12-11 23:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: