| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-35382 | 6.5 | SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user. | 2020-12-14 21:30:00 | 2020-12-14 16:15:00 |
| CVE-2020-24339 | 5.0 | An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The DNS domain name record decompression functionality in pico_dns_decompress_name() in pico_dns_common.c does not validate the compression pointer offset values with respect to the act | 2020-12-14 21:30:00 | 2020-12-11 23:15:00 |
| CVE-2020-24340 | 5.0 | An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The code that processes DNS responses in pico_mdns_handle_data_as_answers_generic() in pico_mdns.c does not check whether the number of answers/responses specified in a DNS packet heade | 2020-12-14 21:29:00 | 2020-12-11 23:15:00 |
| CVE-2020-24341 | 6.4 | An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The TCP input data processing function in pico_tcp.c does not validate the length of incoming TCP packets, which leads to an out-of-bounds read when assembling received packets into a d | 2020-12-14 21:26:00 | 2020-12-11 23:15:00 |
| CVE-2020-35378 | 7.5 | SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands and bypass authentication via the username and password fields. | 2020-12-14 21:21:00 | 2020-12-14 16:15:00 |
| CVE-2020-25112 | 7.5 | An issue was discovered in the IPv6 stack in Contiki through 3.0. There are inconsistent checks for IPv6 header extension lengths. This leads to Denial-of-Service and potential Remote Code Execution via a crafted ICMPv6 echo packet. | 2020-12-14 21:18:00 | 2020-12-11 23:15:00 |
| CVE-2018-4833 | 5.8 | A vulnerability has been identified in RFID 181EIP (All versions), RUGGEDCOM Win (V4.4, V4.5, V5.0, and V5.1), SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3), SCALANCE X-200IRT switch family (incl. SIPLUS NET variant | 2020-12-14 21:15:00 | 2018-06-14 16:29:00 |
| CVE-2020-35149 | 5.0 | lib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property (e.g., __proto__) can be copied during a merge or clone operation. | 2020-12-14 21:12:00 | 2020-12-11 19:15:00 |
| CVE-2020-7541 | 5.0 | A CWE-425: Direct Request ('Forced Browsing') vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), that could | 2020-12-14 21:07:00 | 2020-12-11 01:15:00 |
| CVE-2020-7540 | 7.5 | A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and associated Communication Modules (see security notification for affected versions), | 2020-12-14 21:00:00 | 2020-12-11 01:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: