| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-5627 | 2.1 | The iOS mobile application BlueCats Reveal before 5.14 stores the username and password in the app cache as base64 encoded strings, i.e. clear text. These persist in the cache even if the user logs out. This can allow an attacker to compromise the af | 2020-10-16 15:38:00 | 2019-05-22 18:29:00 |
| CVE-2019-5626 | 2.1 | The Android mobile application BlueCats Reveal before 3.0.19 stores the username and password in a clear text file. This file persists until the user logs out or the session times out from non-usage (30 days of no user activity). This can allow an at | 2020-10-16 15:37:00 | 2019-05-22 18:29:00 |
| CVE-2020-15176 | 5.0 | In GLPI before version 9.5.2, when supplying a back tick in input that gets put into a SQL query,the application does not escape or sanitize allowing for SQL Injection to occur. Leveraging this vulnerability an attacker is able to exfiltrate sensitiv | 2020-10-16 15:36:00 | 2020-10-07 19:15:00 |
| CVE-2019-5625 | 3.6 | The Android mobile application Halo Home before 1.11.0 stores OAuth authentication and refresh access tokens in a clear text file. This file persists until the user logs out of the application and reboots the device. This vulnerability can allow an a | 2020-10-16 15:36:00 | 2019-05-22 18:29:00 |
| CVE-2019-1851 | 4.0 | A vulnerability in the External RESTful Services (ERS) API of the Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to generate arbitrary certificates signed by the Internal Certificate Authority (CA) Services on ISE. | 2020-10-16 15:32:00 | 2019-05-16 02:29:00 |
| CVE-2019-1768 | 7.2 | A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to cause a buffer overflow condition or perform command injection. This could allow t | 2020-10-16 15:31:00 | 2019-05-16 02:29:00 |
| CVE-2019-1814 | 5.0 | A vulnerability in the interactions between the DHCP and TFTP features for Cisco Small Business 300 Series (Sx300) Managed Switches could allow an unauthenticated, remote attacker to cause the device to become low on system memory, which in turn coul | 2020-10-16 15:30:00 | 2019-05-16 00:29:00 |
| CVE-2019-1806 | 6.8 | A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco Small Business Sx200, Sx300, Sx500, ESW2 Series Managed Switches and Small Business Sx250, Sx350, Sx550 Series Switches could allow an authenticated, rem | 2020-10-16 15:30:00 | 2019-05-15 22:29:00 |
| CVE-2019-5449 | 4.0 | A missing check in the Nextcloud Server prior to version 15.0.1 causes leaking of calendar event names when adding or modifying confidential or private events. | 2020-10-16 15:23:00 | 2019-07-30 21:15:00 |
| CVE-2019-3794 | 4.3 | Cloud Foundry UAA, versions prior to v73.4.0, does not set an X-FRAME-OPTIONS header on various endpoints. A remote user can perform clickjacking attacks on UAA's frontend sites. | 2020-10-16 15:21:00 | 2019-07-18 16:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: