Rezultati pretraživanja za 'Proizvođač: winstonprivacy'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-16262 | 7.2 | Winston 1.5.4 devices have a local www-data user that is overly permissioned, resulting in root privilege escalation. | 2021-07-21 11:39:00 | 2020-10-28 18:15:00 |
| CVE-2020-16261 | 7.2 | Winston 1.5.4 devices allow a U-Boot interrupt, resulting in local root access. | 2021-07-21 11:39:00 | 2020-10-28 18:15:00 |
| CVE-2020-16259 | 10.0 | Winston 1.5.4 devices have an SSH user account with access from bastion hosts. This is undocumented in device documents and is not announced to the user. | 2021-07-21 11:39:00 | 2020-10-28 18:15:00 |
| CVE-2020-16257 | 10.0 | Winston 1.5.4 devices are vulnerable to command injection via the API. | 2021-07-21 11:39:00 | 2020-10-28 17:15:00 |
| CVE-2020-16260 | 5.0 | Winston 1.5.4 devices do not enforce authorization. This is exploitable from the intranet, and can be combined with other vulnerabilities for remote exploitation. | 2020-11-04 20:41:00 | 2020-10-28 18:15:00 |
| CVE-2020-16258 | 5.6 | Winston 1.5.4 devices make use of a Monit service (not managed during the normal user process) which is configured with default credentials. | 2020-11-04 17:20:00 | 2020-10-28 18:15:00 |
| CVE-2020-16263 | 6.4 | Winston 1.5.4 devices have a CORS configuration that trusts arbitrary origins. This allows requests to be made and viewed by arbitrary origins. | 2020-11-03 20:00:00 | 2020-10-28 18:15:00 |
| CVE-2020-16256 | 9.3 | The API on Winston 1.5.4 devices is vulnerable to CSRF. | 2020-11-03 19:41:00 | 2020-10-28 18:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/1
Zapisa po stranici: