| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-10922 | 7.5 | A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 and newer (All versions), SIMATIC WinCC V7.2 and earlier (All versions), SIMATIC WinCC V7.3 and newer (All versions). An attacker with network ac | 2020-10-02 14:36:00 | 2019-05-14 20:29:00 |
| CVE-2019-10145 | 6.9 | rkt through version 1.30.0 does not isolate processes in containers that are run with `rkt enter`. Processes run with `rkt enter` do not have seccomp filtering during stage 2 (the actual environment in which the applications run). Compromised contain | 2020-10-02 14:35:00 | 2019-06-03 19:29:00 |
| CVE-2019-10962 | 5.0 | BD Alaris Gateway versions, 1.0.13,1.1.3 Build 10,1.1.3 MR Build 11,1.1.5, and 1.1.6, The web browser user interface on the Alaris Gateway Workstation does not prevent an attacker with knowledge of the IP address of the Alaris Gateway Workstation ter | 2020-10-02 14:34:00 | 2019-06-13 21:29:00 |
| CVE-2019-10966 | 5.0 | In GE Aestiva and Aespire versions 7100 and 7900, a vulnerability exists where serial devices are connected via an added unsecured terminal server to a TCP/IP network configuration, which could allow an attacker to remotely modify device configuratio | 2020-10-02 14:32:00 | 2019-07-10 18:15:00 |
| CVE-2019-10915 | 4.6 | A vulnerability has been identified in TIA Administrator (All versions < V1.0 SP1 Upd1). The integrated configuration web application (TIA Administrator) allows to execute certain application commands without proper authentication. The vulnerability | 2020-10-02 14:29:00 | 2019-07-11 22:15:00 |
| CVE-2019-10162 | 5.0 | A vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.10, 4.0.8 allowing an authorized user to cause the server to exit by inserting a crafted record in a MASTER type zone under their control. The issue is due to the fac | 2020-10-02 14:27:00 | 2019-07-30 23:15:00 |
| CVE-2019-10165 | 2.1 | OpenShift Container Platform before version 4.1.3 writes OAuth tokens in plaintext to the audit logs for the Kubernetes API server and OpenShift API server. A user with sufficient privileges could recover OAuth tokens from these audit logs and use th | 2020-10-02 14:26:00 | 2019-07-30 23:15:00 |
| CVE-2019-10980 | 6.8 | A type confusion vulnerability may be exploited when LAquis SCADA 4.3.1.71 processes a specially crafted project file. This may allow an attacker to execute remote code. The attacker must have local access to the system. A CVSS v3 base score of 7.8 h | 2020-10-02 14:12:00 | 2019-08-05 19:15:00 |
| CVE-2019-10960 | 5.0 | Zebra Industrial Printers All Versions, Zebra printers are shipped with unrestricted end-user access to front panel options. If the option to use a passcode to limit the functionality of the front panel is applied, specially crafted packets could be | 2020-10-02 14:11:00 | 2019-08-20 21:15:00 |
| CVE-2019-10201 | 5.5 | It was found that Keycloak's SAML broker, versions up to 6.0.1, did not verify missing message signatures. If an attacker modifies the SAML Response and removes the <Signature> sections, the message is still accepted, and the message can be modified. | 2020-10-02 14:11:00 | 2019-08-14 17:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39953
Zapisa po stranici: