| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-16246 | 4.3 | The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow attackers to trick users into following a link or navigating to a page that posts a malicious JavaScript statement to the vulnerable site, causing th | 2020-11-16 16:58:00 | 2020-10-20 15:15:00 |
| CVE-2020-5941 | 5.0 | On BIG-IP versions 16.0.0-16.0.0.1 and 15.1.0-15.1.0.5, using the RESOLV::lookup command within an iRule may cause the Traffic Management Microkernel (TMM) to generate a core file and restart. This issue occurs when data exceeding the maximum limit o | 2020-11-16 16:54:00 | 2020-11-05 20:15:00 |
| CVE-2020-5946 | 5.0 | In BIG-IP Advanced WAF and FPS versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.7, under some circumstances, certain format client-side alerts sent to the BIG-IP virtual server configured with DataSafe may cause the Traffic Management Mic | 2020-11-16 16:45:00 | 2020-11-05 20:15:00 |
| CVE-2020-5942 | 4.3 | In BIG-IP PEM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when processing Capabilities-Exchange-Answer (CEA) packets with certain attributes from the Policy and Charging Rules Fun | 2020-11-16 16:25:00 | 2020-11-05 20:15:00 |
| CVE-2020-26210 | 3.5 | In BookStack before version 0.30.4, a user with permissions to edit a page could add an attached link which would execute untrusted JavaScript code when clicked by a viewer of the page. Dangerous content may remain in the database after this update. | 2020-11-16 16:14:00 | 2020-11-03 19:15:00 |
| CVE-2020-26211 | 3.5 | In BookStack before version 0.30.4, a user with permissions to edit a page could insert JavaScript code through the use of `javascript:` URIs within a link or form which would run, within the context of the current page, when clicked or submitted. Ad | 2020-11-16 16:07:00 | 2020-11-03 21:15:00 |
| CVE-2020-27152 | 2.1 | An issue was discovered in ioapic_lazy_update_eoi in arch/x86/kvm/ioapic.c in the Linux kernel before 5.9.2. It has an infinite loop related to improper interaction between a resampler and edge triggering, aka CID-77377064c3a9. | 2020-11-16 15:14:00 | 2020-11-06 08:15:00 |
| CVE-2017-16046 | 5.0 | `mariadb` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. | 2020-11-16 14:34:00 | 2018-06-04 19:29:00 |
| CVE-2014-3467 | 5.0 | Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service (out-of-bounds read) via crafted ASN.1 data. | 2020-11-16 14:33:00 | 2014-06-05 20:55:00 |
| CVE-2014-3468 | 7.5 | The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to cause out-of-bounds access via crafted ASN.1 data. | 2020-11-16 14:30:00 | 2014-06-05 20:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: