| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-9565 | 6.4 | Druide Antidote RX, HD, 8 before 8.05.2287, 9 before 9.5.3937 and 10 before 10.1.2147 allows remote attackers to steal NTLM hashes or perform SMB relay attacks upon a direct launch of the product, or upon an indirect launch via an integration such as | 2020-08-24 17:37:00 | 2019-03-04 08:29:00 |
| CVE-2019-9546 | 7.5 | SolarWinds Orion Platform before 2018.4 Hotfix 2 allows privilege escalation through the RabbitMQ service. | 2020-08-24 17:37:00 | 2019-03-01 22:29:00 |
| CVE-2018-20798 | 5.0 | The expiretable configuration in pfSense 2.4.4_1 establishes block durations that are incompatible with the block durations implemented by sshguard, which might make it easier for attackers to bypass intended access restrictions. | 2020-08-24 17:37:00 | 2019-03-01 15:29:00 |
| CVE-2018-18498 | 7.5 | A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a raw value is used instead of the checked value. This leads to a possible out-of-bounds write. This vulnerability affects Thunderbird | 2020-08-24 17:37:00 | 2019-02-28 18:29:00 |
| CVE-2018-18497 | 4.3 | Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argument. This could allow a malicious WebExtension to ope | 2020-08-24 17:37:00 | 2019-02-28 18:29:00 |
| CVE-2018-18496 | 6.8 | When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted content for a clickjacking attack that confuses users into downloading and executing an executable file from a temporary directory. *Not | 2020-08-24 17:37:00 | 2019-02-28 18:29:00 |
| CVE-2018-18495 | 4.3 | WebExtension content scripts can be loaded into about: pages in some circumstances, in violation of the permissions granted to extensions. This could allow an extension to interfere with the loading and usage of these pages and use capabilities that | 2020-08-24 17:37:00 | 2019-02-28 18:29:00 |
| CVE-2018-12403 | 5.0 | If a site is loaded over a HTTPS connection but loads a favicon resource over HTTP, the mixed content warning is not displayed to users. This vulnerability affects Firefox < 63. | 2020-08-24 17:37:00 | 2019-02-28 18:29:00 |
| CVE-2018-12393 | 5.0 | A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an internal UTF-16 representation could result in allocating a buffer too small for the conversion. This leads to a possible out-of-bou | 2020-08-24 17:37:00 | 2019-02-28 18:29:00 |
| CVE-2018-12391 | 9.3 | During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of security policies. Because the problem is in the underlying Android service, this issue is addressed by treating all HLS streams as cro | 2020-08-24 17:37:00 | 2019-02-28 18:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: