| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-1767 | 7.2 | A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to cause a buffer overflow condition or perform command injection. This could allow t | 2020-10-16 16:13:00 | 2019-05-15 19:29:00 |
| CVE-2019-1735 | 7.2 | A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges on the underlying operating system of an affected device. The vulnerability is due to insufficient | 2020-10-16 16:12:00 | 2019-05-15 19:29:00 |
| CVE-2019-5438 | 5.0 | Path traversal using symlink in npm harp module versions <= 0.29.0. | 2020-10-16 16:12:00 | 2019-05-10 22:29:00 |
| CVE-2019-6566 | 7.2 | GE Communicator, all versions prior to 4.0.517, allows a non-administrative user to replace the uninstaller with a malicious version, which could allow an attacker to gain administrator privileges to the system. | 2020-10-16 16:11:00 | 2019-05-09 15:29:00 |
| CVE-2019-6544 | 6.8 | GE Communicator, all versions prior to 4.0.517, has a service running with system privileges that may allow an unprivileged user to perform certain administrative actions, which may allow the execution of scheduled scripts with system administrator p | 2020-10-16 16:11:00 | 2019-05-09 15:29:00 |
| CVE-2020-13952 | 5.5 | In the course of work on the open source project it was discovered that authenticated users running queries against Hive and Presto database engines could access information via a number of templated fields including the contents of query description | 2020-10-16 16:08:00 | 2020-09-30 21:15:00 |
| CVE-2019-5431 | 5.5 | This vulnerability was caused by an incomplete fix to CVE-2017-0911. Twitter Kit for iOS versions 3.0 to 3.4.0 is vulnerable to a callback verification flaw in the "Login with Twitter" component allowing an attacker to provide alternate credentials. | 2020-10-16 16:08:00 | 2019-05-06 17:29:00 |
| CVE-2019-3805 | 4.7 | A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate arbitrary processes on the system. An attacker could exploit this by modifying the PID file in /var/run/jboss | 2020-10-16 16:04:00 | 2019-05-03 20:29:00 |
| CVE-2019-1592 | 7.2 | A vulnerability in the background operations functionality of Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an authenticated, local attacker to gain elevated privileges as root on an affected device | 2020-10-16 16:03:00 | 2019-05-03 15:29:00 |
| CVE-2019-3937 | 2.1 | Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames, passwords, slideshow passcode, and other configuration options in cleartext in the file /tmp/scfgdndf. A local attacker can use this vulnerability to recover sen | 2020-10-16 16:03:00 | 2019-04-30 21:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: