| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-35590 | 5.0 | LimitLoginAttempts.php in the limit-login-attempts-reloaded plugin before 2.17.4 for WordPress allows a bypass of (per IP address) rate limits because the X-Forwarded-For header can be forged. When the plugin is configured to accept an arbitrary head | 2020-12-22 20:01:00 | 2020-12-21 07:15:00 |
| CVE-2018-15634 | 4.3 | Cross-site scripting (XSS) issue in attachment management in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim via a crafted link. | 2020-12-22 19:55:00 | 2020-12-22 17:15:00 |
| CVE-2020-29447 | 4.0 | Affected versions of Atlassian Crucible allow remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability in the file upload request feature of code reviews. The affected versions are before version 4.7.4, an | 2020-12-22 19:55:00 | 2020-12-21 01:15:00 |
| CVE-2020-35589 | 3.5 | The limit-login-attempts-reloaded plugin before 2.17.4 for WordPress allows wp-admin/options-general.php?page=limit-login-attempts&tab= XSS. A malicious user can cause an administrator user to supply dangerous content to the vulnerable page, which is | 2020-12-22 19:53:00 | 2020-12-21 07:15:00 |
| CVE-2020-35579 | 5.0 | tindy2013 subconverter 0.6.4 has a /sub?target=%TARGET%&url=%URL%&config=%CONFIG% API endpoint that accepts an arbitrary %URL% value and launches a GET request for it, but does not consider that the external request target may indirectly redirect bac | 2020-12-22 19:49:00 | 2020-12-20 07:15:00 |
| CVE-2018-15633 | 4.3 | Cross-site scripting (XSS) issue in "document" module in Odoo Community 11.0 and earlier and Odoo Enterprise 11.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim via crafted attachment filenames. | 2020-12-22 19:48:00 | 2020-12-22 17:15:00 |
| CVE-2018-15638 | 3.5 | Cross-site scripting (XSS) issue in mail module in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim via crafted channel names. | 2020-12-22 19:46:00 | 2020-12-22 17:15:00 |
| CVE-2018-15641 | 3.5 | Cross-site scripting (XSS) issue in web module in Odoo Community 11.0 through 14.0 and Odoo Enterprise 11.0 through 14.0, allows remote authenticated internal users to inject arbitrary web script in the browser of a victim via crafted calendar event | 2020-12-22 19:40:00 | 2020-12-22 17:15:00 |
| CVE-2020-27254 | 5.0 | Emerson Rosemount X-STREAM Gas AnalyzerX-STREAM enhanced XEGP, XEGK, XEFD, XEXF – all revisions, The affected products are vulnerable to improper authentication for accessing log and backup data, which could allow an attacker with a specially crafted | 2020-12-22 19:30:00 | 2020-12-21 18:15:00 |
| CVE-2020-26251 | 4.3 | Open Zaak is a modern, open-source data- and services-layer to enable zaakgericht werken, a Dutch approach to case management. In Open Zaak before version 1.3.3 the Cross-Origin-Resource-Sharing policy in Open Zaak is currently wide open - every clie | 2020-12-22 19:30:00 | 2020-12-18 18:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: