| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-10970 | 10.0 | In Rockwell Automation PanelView 5510 (all versions manufactured before March 13, 2019 that have never been updated to v4.003, v5.002, or later), a remote, unauthenticated threat actor with access to an affected PanelView 5510 Graphic Display, upon s | 2020-10-01 16:43:00 | 2019-07-11 20:15:00 |
| CVE-2019-10175 | 4.0 | A flaw was found in the containerized-data-importer in virt-cdi-cloner, version 1.4, where the host-assisted cloning feature does not determine whether the requesting user has permission to access the Persistent Volume Claim (PVC) in the source names | 2020-10-01 16:43:00 | 2019-06-28 20:15:00 |
| CVE-2015-3655 | 6.8 | Cross-site request forgery (CSRF) vulnerability in Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to hijack the authentication of administrators by leveraging improper enforcement of the anti-CSRF | 2020-10-01 16:41:00 | 2017-08-29 15:29:00 |
| CVE-2020-3124 | 4.3 | A vulnerability in the web-based interface of Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is d | 2020-10-01 16:15:00 | 2020-09-23 01:15:00 |
| CVE-2020-16171 | 6.4 | An issue was discovered in Acronis Cyber Backup before 12.5 Build 16342. Some API endpoints on port 9877 under /api/ams/ accept an additional custom Shard header. The value of this header is afterwards used in a separate web request issued by the app | 2020-10-01 15:43:00 | 2020-09-21 14:15:00 |
| CVE-2020-4315 | 4.3 | IBM Business Automation Content Analyzer on Cloud 1.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site | 2020-10-01 15:41:00 | 2020-09-21 15:15:00 |
| CVE-2020-3117 | 4.3 | A vulnerability in the API Framework of Cisco AsyncOS for Cisco Web Security Appliance (WSA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to inject crafted HTTP headers in the web server's resp | 2020-10-01 15:37:00 | 2020-09-23 01:15:00 |
| CVE-2019-1983 | 7.8 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to cause repeated crashes | 2020-10-01 14:59:00 | 2020-09-23 01:15:00 |
| CVE-2019-1947 | 7.8 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause the CPU utilization to increase to 100 percent, causing a denial of ser | 2020-10-01 14:55:00 | 2020-09-23 01:15:00 |
| CVE-2019-15969 | 4.3 | A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface of an affected device. The vulne | 2020-10-01 14:02:00 | 2020-09-23 01:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: