Rezultati pretraživanja za 'Proizvođač: zkteco'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2017-17056 | 6.8 | The ZKTime Web Software 2.0.1.12280 allows the Administrator to elevate the privileges of the application user using a 'password_change()' function of the Modify Password component, reachable via the old_password, new_password1, and new_password2 par | 2017-12-20 17:10:00 | 2017-12-04 14:29:00 |
| CVE-2017-14680 | 5.0 | ZKTeco ZKTime Web 2.0.1.12280 allows remote attackers to obtain sensitive employee metadata via a direct request for a PDF document. | 2017-10-03 17:03:00 | 2017-09-21 23:29:00 |
| CVE-2017-13129 | 6.0 | Cross-site request forgery (CSRF) vulnerability in ZKTeco ZKTime Web 2.0.1.12280 allows remote authenticated users to hijack the authentication of administrators for requests that add administrators by leveraging lack of anti-CSRF tokens. | 2017-10-03 16:58:00 | 2017-09-26 14:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/5
Zapisa po stranici: