İçeriğe atla
Noroxi

Yayın tarihine göre

Nisan 2020: sömürülen ve yeni ciddi CVE kayıtları

105 kayıt · 16 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2020-11455
    68Bu hafta

    LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php.

    KritikCVSS 9,8SilahlaştırılmışEPSS %97

    limesurvey · limesurvey1 Nis 2020

  • CVE-2020-11456
    42Planlayın

    LimeSurvey before 4.1.12+200324 has stored XSS in application/views/admin/surveysgroups/surveySettings.php and application/models/SurveysGro

    OrtaCVSS 5,4Kavram kanıtıEPSS %70

    limesurvey · limesurvey1 Nis 2020

  • CVE-2020-10199
    95Hemen

    Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %99

    sonatype · nexus1 Nis 2020

  • CVE-2020-10204
    40Planlayın

    Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution.

    YüksekCVSS 7,2Kavram kanıtıEPSS %38

    sonatype · nexus1 Nis 2020

  • CVE-2020-1943
    53Planlayın

    Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07.

    OrtaCVSS 6,1Kavram kanıtıEPSS %97

    apache · ofbiz1 Nis 2020

  • CVE-2020-1934
    37İzleyin

    In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.

    OrtaCVSS 5,3İstismar yokEPSS %51

    apache · http server1 Nis 2020

  • CVE-2019-17564
    50Planlayın

    Unsafe deserialization occurs within a Dubbo application which has HTTP remoting enabled.

    KritikCVSS 9,8Kavram kanıtıEPSS %36

    apache · dubbo1 Nis 2020

  • CVE-2020-1927
    41Planlayın

    In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by en

    OrtaCVSS 6,1İstismar yokEPSS %56

    apache · http server1 Nis 2020

  • CVE-2020-11491
    40Planlayın

    Monitoring::Logs in Zen Load Balancer 3.10.1 allows remote authenticated admins to conduct absolute path traversal attacks, as demonstrated

    OrtaCVSS 4,9SilahlaştırılmışEPSS %7

    zevenet · zen load balancer2 Nis 2020

  • CVE-2020-11100
    53Planlayın

    In hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4, a remote attacker can write arbitrary bytes

    YüksekCVSS 8,8İstismar yokEPSS %61

    haproxy · haproxy2 Nis 2020

  • CVE-2020-11450
    35İzleyin

    Microstrategy Web 10.4 exposes the JVM configuration, CPU architecture, installation folder, and other information through the URL /MicroStr

    YüksekCVSS 7,5Kavram kanıtıEPSS %17

    microstrategy · microstrategy web2 Nis 2020

  • CVE-2020-11107
    42Planlayın

    An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows.

    YüksekCVSS 8,8Kavram kanıtıEPSS %22

    apachefriends · xampp2 Nis 2020

  • CVE-2020-8639
    40Planlayın

    An unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute arbitrary code by uplo

    YüksekCVSS 8,8Kavram kanıtıEPSS %15

    testlink · testlink3 Nis 2020

  • CVE-2020-8143
    45Planlayın

    An Open Redirect vulnerability was discovered in Revive Adserver version < 5.0.5 and reported by HackerOne user hoangn144.

    OrtaCVSS 6,1İstismar yokEPSS %70

    revive-adserver · revive adserver3 Nis 2020

  • CVE-2020-11518
    45Planlayın

    Zoho ManageEngine ADSelfService Plus before 5815 allows unauthenticated remote code execution.

    KritikCVSS 9,8İstismar yokEPSS %19

    zohocorp · manageengine adselfservice plus4 Nis 2020

  • CVE-2020-11529
    27İzleyin

    Common/Grav.php in Grav before 1.7 has an Open Redirect.

    OrtaCVSS 6,1Kavram kanıtıEPSS %10

    getgrav · grav4 Nis 2020

  • CVE-2020-11547
    37İzleyin

    PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server it

    OrtaCVSS 5,3Kavram kanıtıEPSS %52

    paessler · prtg network monitor4 Nis 2020

  • CVE-2019-19699
    40Planlayın

    There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, lead

    YüksekCVSS 7,2SilahlaştırılmışEPSS %27

    centreon · centreon6 Nis 2020

  • CVE-2020-5734
    38İzleyin

    Classic buffer overflow in SolarWinds Dameware allows a remote, unauthenticated attacker to cause a denial of service by sending a large 'Si

    YüksekCVSS 7,5İstismar yokEPSS %25

    solarwinds · dameware7 Nis 2020

  • CVE-2020-5735
    76Bu hafta

    Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %36

    amcrest · 1080-lite 8ch firmware8 Nis 2020

  • CVE-2020-10977
    40Planlayın

    GitLab EE/CE 8.5 to 12.9 is vulnerable to a an path traversal when moving an issue between projects.

    OrtaCVSS 5,5SilahlaştırılmışEPSS %42

    gitlab · gitlab8 Nis 2020

  • CVE-2020-10619
    40Planlayın

    An attacker could use a specially crafted URL to delete files outside the WebAccess/NMS's (versions prior to 3.0.2) control.

    KritikCVSS 9,1İstismar yokEPSS %14

    advantech · webaccess\/nms9 Nis 2020

  • CVE-2020-3952
    96Hemen

    Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC)

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %90

    vmware · vcenter server10 Nis 2020

  • CVE-2020-5330
    34İzleyin

    Dell EMC Networking X-Series firmware versions 3.0.1.2 and older, Dell EMC Networking PC5500 firmware versions 4.1.0.22 and older and Dell E

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    dell · r1-2210 firmware10 Nis 2020

  • CVE-2020-11710
    49Planlayın

    An issue was discovered in docker-kong (for Kong) through 2.0.3.

    KritikCVSS 9,8Kavram kanıtıEPSS %33

    konghq · docker-kong12 Nis 2020

  • CVE-2020-11738
    89Hemen

    The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the f

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %97

    awesomemotive · duplicator13 Nis 2020

  • CVE-2020-2733
    45Planlayın

    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics).

    KritikCVSS 9,8Kavram kanıtıEPSS %18

    oracle · jd edwards enterpriseone tools15 Nis 2020

  • CVE-2020-2852
    52Planlayın

    Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Calendar).

    YüksekCVSS 8,2İstismar yokEPSS %66

    oracle · advanced outbound telephony15 Nis 2020

  • CVE-2020-2854
    52Planlayın

    Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface).

    YüksekCVSS 8,2İstismar yokEPSS %66

    oracle · advanced outbound telephony15 Nis 2020

  • CVE-2020-2871
    52Planlayın

    Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface).

    YüksekCVSS 8,2İstismar yokEPSS %66

    oracle · advanced outbound telephony15 Nis 2020

  • CVE-2020-2882
    46Planlayın

    Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers).

    YüksekCVSS 8,1İstismar yokEPSS %46

    oracle · human resources15 Nis 2020

  • CVE-2020-2883
    97Hemen

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %94

    oracle · weblogic server15 Nis 2020

  • CVE-2020-2950
    60Bu hafta

    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General).

    KritikCVSS 9,8Kavram kanıtıEPSS %71

    oracle · business intelligence15 Nis 2020

  • CVE-2020-0687
    41Planlayın

    A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microso

    YüksekCVSS 8,8İstismar yokEPSS %19

    microsoft · windows 1015 Nis 2020

  • CVE-2020-0889
    35İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %11

    microsoft · windows 1015 Nis 2020

  • CVE-2020-0906
    38İzleyin

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka '

    YüksekCVSS 8,8İstismar yokEPSS %11

    microsoft · excel15 Nis 2020

  • CVE-2020-0907
    35İzleyin

    A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics

    YüksekCVSS 7,8İstismar yokEPSS %11

    microsoft · windows 1015 Nis 2020

  • CVE-2020-0920
    38İzleyin

    A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa

    YüksekCVSS 8,8İstismar yokEPSS %10

    microsoft · sharepoint enterprise server15 Nis 2020

  • CVE-2020-0929
    38İzleyin

    A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa

    YüksekCVSS 8,8İstismar yokEPSS %10

    microsoft · sharepoint enterprise server15 Nis 2020

  • CVE-2020-0931
    38İzleyin

    A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa

    YüksekCVSS 8,8İstismar yokEPSS %10

    microsoft · business productivity servers15 Nis 2020

  • CVE-2020-0932
    46Planlayın

    A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa

    YüksekCVSS 8,8İstismar yokEPSS %35

    microsoft · sharepoint enterprise server15 Nis 2020

  • CVE-2020-0938
    82Hemen

    A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %68

    microsoft · windows 10 150715 Nis 2020

  • CVE-2020-0953
    35İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %11

    microsoft · windows 1015 Nis 2020

  • CVE-2020-0959
    35İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %11

    microsoft · windows 1015 Nis 2020

  • CVE-2020-0960
    35İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %11

    microsoft · windows 1015 Nis 2020

  • CVE-2020-0961
    35İzleyin

    A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka

    YüksekCVSS 7,8İstismar yokEPSS %11

    microsoft · office15 Nis 2020

  • CVE-2020-0964
    41Planlayın

    A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka

    YüksekCVSS 8,8İstismar yokEPSS %18

    microsoft · windows 1015 Nis 2020

  • CVE-2020-0966
    39İzleyin

    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execut

    YüksekCVSS 8,8İstismar yokEPSS %11

    microsoft · internet explorer15 Nis 2020

  • CVE-2020-0967
    39İzleyin

    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execut

    YüksekCVSS 8,8İstismar yokEPSS %11

    microsoft · internet explorer15 Nis 2020

  • CVE-2020-0968
    69Bu hafta

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scrip

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %30

    microsoft · internet explorer15 Nis 2020

  • CVE-2020-0969
    34İzleyin

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-b

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · edge15 Nis 2020

  • CVE-2020-0970
    34İzleyin

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · chakracore15 Nis 2020

  • CVE-2020-0971
    39İzleyin

    A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa

    YüksekCVSS 8,8İstismar yokEPSS %13

    microsoft · sharepoint enterprise server15 Nis 2020

  • CVE-2020-0974
    38İzleyin

    A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa

    YüksekCVSS 8,8İstismar yokEPSS %10

    microsoft · sharepoint enterprise server15 Nis 2020

  • CVE-2020-0979
    38İzleyin

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka '

    YüksekCVSS 8,8İstismar yokEPSS %11

    microsoft · office 365 proplus15 Nis 2020

  • CVE-2020-0980
    35İzleyin

    A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W

    YüksekCVSS 7,8İstismar yokEPSS %11

    microsoft · office15 Nis 2020

  • CVE-2020-0988
    35İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %11

    microsoft · windows 1015 Nis 2020

  • CVE-2020-0991
    35İzleyin

    A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka

    YüksekCVSS 7,8İstismar yokEPSS %11

    microsoft · office15 Nis 2020

  • CVE-2020-0992
    35İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %11

    microsoft · windows 1015 Nis 2020

  • CVE-2020-0994
    35İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %11

    microsoft · windows 1015 Nis 2020

  • CVE-2020-0995
    36İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %17

    microsoft · windows 1015 Nis 2020

  • CVE-2020-0999
    35İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %11

    microsoft · windows 1015 Nis 2020

  • CVE-2020-1008
    35İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %11

    microsoft · windows 1015 Nis 2020

  • CVE-2020-1020
    85Hemen

    A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %65

    microsoft · windows 10 150715 Nis 2020

  • CVE-2020-1027
    62Bu hafta

    An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation o

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %4

    microsoft · windows 10 150715 Nis 2020

  • CVE-2020-3161
    94Hemen

    Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %83

    cisco · ip phone 8865 firmware15 Nis 2020

  • CVE-2020-3239
    57Planlayın

    Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data

    YüksekCVSS 8,8İstismar yokEPSS %73

    cisco · ucs director15 Nis 2020

  • CVE-2020-3240
    41Planlayın

    Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data

    YüksekCVSS 7,3İstismar yokEPSS %38

    cisco · ucs director15 Nis 2020

  • CVE-2020-3243
    66Bu hafta

    Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data

    KritikCVSS 9,8SilahlaştırılmışEPSS %88

    cisco · ucs director15 Nis 2020

  • CVE-2020-3247
    62Bu hafta

    Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data

    KritikCVSS 9,8İstismar yokEPSS %75

    cisco · ucs director15 Nis 2020

  • CVE-2020-3248
    61Bu hafta

    Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data

    KritikCVSS 9,8İstismar yokEPSS %74

    cisco · ucs director15 Nis 2020

  • CVE-2020-3249
    37İzleyin

    Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data

    YüksekCVSS 7,5İstismar yokEPSS %23

    cisco · ucs director15 Nis 2020

  • CVE-2020-3250
    60Bu hafta

    Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data

    KritikCVSS 9,8SilahlaştırılmışEPSS %60

    cisco · ucs director15 Nis 2020

  • CVE-2020-3251
    53Planlayın

    Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data

    YüksekCVSS 8,8İstismar yokEPSS %61

    cisco · ucs director15 Nis 2020

  • CVE-2020-11819
    47Planlayın

    In Rukovoditel 2.5.2, an attacker may inject an arbitrary .php file location instead of a language file and thus achieve command execution.

    KritikCVSS 9,8Kavram kanıtıEPSS %26

    rukovoditel · rukovoditel16 Nis 2020

  • CVE-2020-11883
    26İzleyin

    In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lea

    OrtaCVSS 5,3Kavram kanıtıEPSS %15

    divante · storefront-api17 Nis 2020

  • CVE-2020-11886
    32İzleyin

    OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the NodeListController) via snmpParm or snmpParmValue to addC

    YüksekCVSS 8,1İstismar yokEPSS %1

    opennms · horizon17 Nis 2020

  • CVE-2020-11946
    46Planlayın

    Zoho ManageEngine OpManager before 125120 allows an unauthenticated user to retrieve an API key via a servlet call.

    YüksekCVSS 7,5İstismar yokEPSS %51

    zohocorp · manageengine opmanager20 Nis 2020

  • CVE-2020-1967
    46Planlayın

    Segmentation fault in SSL_check_chain

    YüksekCVSS 7,5Kavram kanıtıEPSS %53

    openssl · openssl21 Nis 2020

  • CVE-2020-10914
    60Bu hafta

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.4587.

    KritikCVSS 9,8SilahlaştırılmışEPSS %47

    veeam · one22 Nis 2020

  • CVE-2020-10915
    65Bu hafta

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.4587.

    KritikCVSS 9,8SilahlaştırılmışEPSS %86

    veeam · one22 Nis 2020

  • CVE-2020-7350
    40Planlayın

    Metasploit Framework Plugin Libnotify Command Injection

    YüksekCVSS 7,8SilahlaştırılmışEPSS %5

    rapid7 · metasploit22 Nis 2020

  • CVE-2020-11940
    30İzleyin

    In nDPI through 3.2 Stable, an out-of-bounds read in concat_hash_string in ssh.c can be exploited by a network-positioned attacker that can

    YüksekCVSS 7,5İstismar yokEPSS %1

    ntop · ndpi23 Nis 2020

  • CVE-2020-11945
    47Planlayın

    An issue was discovered in Squid before 5.0.2.

    KritikCVSS 9,8İstismar yokEPSS %27

    squid-cache · squid23 Nis 2020

  • CVE-2020-6819
    63Bu hafta

    Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free.

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %3

    mozilla · firefox24 Nis 2020

  • CVE-2020-6820
    64Bu hafta

    Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free.

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %7

    mozilla · firefox24 Nis 2020

  • CVE-2020-12271
    82Hemen

    A SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG Firewall devices, as exploited in the wild

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %42

    sophos · sfos27 Nis 2020

  • CVE-2020-12133
    42Planlayın

    The Apros Evolution, ConsciusMap, and Furukawa provisioning systems through 2.8.1 allow remote code execution because of javax.faces.ViewSta

    KritikCVSS 9,8İstismar yokEPSS %10

    farukawa · electric consciousmap27 Nis 2020

  • CVE-2020-12138
    36İzleyin

    AMD ATI atillk64.sys 5.11.9.0 allows low-privileged users to interact directly with physical memory by calling one of several driver routine

    YüksekCVSS 8,8İstismar yokEPSS %3

    amd · atillk6427 Nis 2020

  • CVE-2020-9294
    62Bu hafta

    An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a

    KritikCVSS 9,8SilahlaştırılmışEPSS %77

    fortinet · fortimail27 Nis 2020

  • CVE-2020-1745
    40Planlayın

    A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.

    KritikCVSS 9,8İstismar yokEPSS %4

    redhat · undertow28 Nis 2020

  • CVE-2020-8471
    31İzleyin

    ABB Central Licensing System - Weak File Permissions

    YüksekCVSS 7,8İstismar yokEPSS %0

    abb · 800xa system28 Nis 2020

  • CVE-2020-12447
    34İzleyin

    A Local File Inclusion (LFI) issue on Onkyo TX-NR585 1000-0000-000-0008-0000 devices allows remote unauthenticated users on the network to r

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    onkyo · tx-nr585 firmware28 Nis 2020

  • CVE-2020-11023
    79Bu hafta

    Potential XSS vulnerability in jQuery

    OrtaCVSS 6,1KEVSilahlaştırılmışEPSS %84

    jquery · jquery29 Nis 2020

  • CVE-2020-11022
    54Planlayın

    jQuery has a potential XSS vulnerability

    OrtaCVSS 6,1Kavram kanıtıEPSS %99

    jquery · jquery29 Nis 2020

  • CVE-2020-11943
    42Planlayın

    An issue was discovered in Open-AudIT 3.2.2.

    YüksekCVSS 8,8İstismar yokEPSS %23

    opmantek · open-audit29 Nis 2020

  • CVE-2019-5618
    40Planlayın

    A-PDF WAV to MP3 Stack-based Buffer Overflow

    YüksekCVSS 7,8SilahlaştırılmışEPSS %2

    a-pdf · wav to mp329 Nis 2020

  • CVE-2019-5619
    60Bu hafta

    AASync.com AASync Stack-based Buffer Overflow

    KritikCVSS 9,8SilahlaştırılmışEPSS %4

    aasync · aasync29 Nis 2020

  • CVE-2019-5620
    60Bu hafta

    ABB MicroSCADA Pro SYS600 Missing Authentication for Critical Function

    KritikCVSS 9,8SilahlaştırılmışEPSS %70

    hitachienergy · microscada pro sys60029 Nis 2020

  • CVE-2020-6010
    50Planlayın

    LearnPress Wordpress plugin version prior and including 3.2.6.7 is vulnerable to SQL Injection

    YüksekCVSS 8,8SilahlaştırılmışEPSS %49

    thimpress · learnpress30 Nis 2020