| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-15217 | 5.0 | In GLPI before version 9.5.2, there is a leakage of user information through the public FAQ. The issue was introduced in version 9.5.0 and patched in 9.5.2. As a workaround, disable public access to the FAQ. | 2020-10-16 15:19:00 | 2020-10-07 19:15:00 |
| CVE-2019-3570 | 7.5 | Call to the scrypt_enc() function in HHVM can lead to heap corruption by using specifically crafted parameters (N, r and p). This happens if the parameters are configurable by an attacker for instance by providing the output of scrypt_enc() in a cont | 2020-10-16 15:14:00 | 2019-07-18 16:15:00 |
| CVE-2019-1923 | 4.6 | A vulnerability in Cisco Small Business SPA500 Series IP Phones could allow a physically proximate attacker to execute arbitrary commands on the device. The vulnerability is due to improper input validation in the device configuration interface. An a | 2020-10-16 15:14:00 | 2019-07-17 21:15:00 |
| CVE-2019-1920 | 6.1 | A vulnerability in the 802.11r Fast Transition (FT) implementation for Cisco IOS Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected interface. The vulnerability i | 2020-10-16 15:11:00 | 2019-07-17 21:15:00 |
| CVE-2019-1873 | 7.8 | A vulnerability in the cryptographic driver for Cisco Adaptive Security Appliance Software (ASA) and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reboot unexpectedly. The vulnerability | 2020-10-16 15:11:00 | 2019-07-10 18:15:00 |
| CVE-2019-5629 | 7.2 | Rapid7 Insight Agent, version 2.6.3 and prior, suffers from a local privilege escalation due to an uncontrolled DLL search path. Specifically, when Insight Agent 2.6.3 and prior starts, the Python interpreter attempts to load python3.dll at "C:\DLLs\ | 2020-10-16 15:10:00 | 2019-07-13 01:15:00 |
| CVE-2019-1893 | 7.2 | A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS) of an affected device as root. The vulnerability is due to insu | 2020-10-16 15:10:00 | 2019-07-06 02:15:00 |
| CVE-2019-1890 | 3.3 | A vulnerability in the fabric infrastructure VLAN connection establishment of the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an unauthenticated, adjacent attacker to bypass security validations a | 2020-10-16 15:09:00 | 2019-07-04 20:15:00 |
| CVE-2019-1889 | 9.0 | A vulnerability in the REST API for software device management in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an authenticated, remote attacker to escalate privileges to root on an affected device. The vulnerability | 2020-10-16 15:08:00 | 2019-07-04 20:15:00 |
| CVE-2019-1886 | 5.0 | A vulnerability in the HTTPS decryption feature of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient validation of Secure Sockets | 2020-10-16 15:08:00 | 2019-07-04 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: