İçeriğe atla
Noroxi

Yayın tarihine göre

Temmuz 2020: sömürülen ve yeni ciddi CVE kayıtları

86 kayıt · 16 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2020-13381
    60Bu hafta

    openSIS through 7.4 allows SQL Injection.

    KritikCVSS 9,8SilahlaştırılmışEPSS %59

    os4ed · opensis1 Tem 2020

  • CVE-2020-13382
    60Bu hafta

    openSIS through 7.4 has Incorrect Access Control.

    KritikCVSS 9,1SilahlaştırılmışEPSS %52

    os4ed · opensis1 Tem 2020

  • CVE-2020-13383
    60Bu hafta

    openSIS through 7.4 allows Directory Traversal.

    YüksekCVSS 7,5SilahlaştırılmışEPSS %67

    os4ed · opensis1 Tem 2020

  • CVE-2020-5902
    99Hemen

    In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Inte

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    f5 · big-ip access policy manager1 Tem 2020

  • CVE-2020-12497
    35İzleyin

    Phoenix Contact Automation Worx <= 1.87: stack-based overflow

    YüksekCVSS 7,8İstismar yokEPSS %14

    phoenixcontact · pc worx1 Tem 2020

  • CVE-2020-15500
    28İzleyin

    An issue was discovered in server.js in TileServer GL through 3.0.0.

    OrtaCVSS 6,1Kavram kanıtıEPSS %12

    tileserver · tileservergl1 Tem 2020

  • CVE-2020-14092
    67Bu hafta

    The CodePeople Payment Form for PayPal Pro plugin before 1.1.65 for WordPress allows SQL Injection.

    KritikCVSS 9,8Kavram kanıtıEPSS %94

    ithemes · paypal pro2 Tem 2020

  • CVE-2020-8163
    60Bu hafta

    The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the `locals` argument o

    YüksekCVSS 8,8Kavram kanıtıEPSS %82

    rubyonrails · rails2 Tem 2020

  • CVE-2020-15505
    99Hemen

    A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3,

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    mobileiron · core6 Tem 2020

  • CVE-2020-9376
    35İzleyin

    D-Link DIR-610 devices allow Information Disclosure via SERVICES=DEVICE.ACCOUNT%0AAUTHORIZED_GROUP=1 to getcfg.php.

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    dlink · dir-610 firmware9 Tem 2020

  • CVE-2020-9377
    71Bu hafta

    D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %21

    dlink · dir-610 firmware9 Tem 2020

  • CVE-2020-7457
    60Bu hafta

    In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4-RELEASE before p1, and 11.3-RELEASE before p

    YüksekCVSS 8,1SilahlaştırılmışEPSS %33

    freebsd · freebsd9 Tem 2020

  • CVE-2019-17638
    40Planlayın

    In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce

    KritikCVSS 9,4Kavram kanıtıEPSS %11

    eclipse · jetty9 Tem 2020

  • CVE-2020-15299
    38İzleyin

    A reflected Cross-Site Scripting (XSS) Vulnerability in the KingComposer plugin through 2.9.4 for WordPress allows remote attackers to trick

    OrtaCVSS 6,1İstismar yokEPSS %46

    king-theme · kingcomposer9 Tem 2020

  • CVE-2020-8191
    31İzleyin

    Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and

    OrtaCVSS 6,1Kavram kanıtıEPSS %23

    citrix · application delivery controller firmware10 Tem 2020

  • CVE-2020-8193
    82Hemen

    Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and C

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %88

    citrix · application delivery controller firmware10 Tem 2020

  • CVE-2020-8194
    29İzleyin

    Reflected code injection in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and

    OrtaCVSS 6,5Kavram kanıtıEPSS %10

    citrix · application delivery controller firmware10 Tem 2020

  • CVE-2020-8195
    66Bu hafta

    Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %33

    citrix · application delivery controller firmware10 Tem 2020

  • CVE-2020-8196
    55Planlayın

    Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and C

    OrtaCVSS 4,3KEVSilahlaştırılmışEPSS %26

    citrix · application delivery controller firmware10 Tem 2020

  • CVE-2020-11749
    41Planlayın

    Pandora FMS 7.0 NG <= 746 suffers from Multiple XSS vulnerabilities in different browser views.

    KritikCVSS 9,0Kavram kanıtıEPSS %16

    pandorafms · pandora fms13 Tem 2020

  • CVE-2020-10987
    93Hemen

    The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via t

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %79

    tenda · ac15 firmware13 Tem 2020

  • CVE-2020-15050
    45Planlayın

    An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2.

    YüksekCVSS 7,5Kavram kanıtıEPSS %50

    supremainc · biostar 213 Tem 2020

  • CVE-2020-13925
    45Planlayın

    Similar to CVE-2020-1956, Kylin has one more restful API which concatenates the API inputs into OS commands and then executes them on the se

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    apache · kylin14 Tem 2020

  • CVE-2020-6286
    29İzleyin

    The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA (LM Configuration Wizard), versions

    OrtaCVSS 5,3Kavram kanıtıEPSS %28

    sap · netweaver application server java14 Tem 2020

  • CVE-2020-6287
    98Hemen

    SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %94

    sap · netweaver application server java14 Tem 2020

  • CVE-2020-1948
    44Planlayın

    This vulnerability can affect all Dubbo users stay on version 2.7.6 or lower.

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    apache · dubbo14 Tem 2020

  • CVE-2020-13934
    49Planlayın

    An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 proces

    YüksekCVSS 7,5İstismar yokEPSS %64

    apache · tomcat14 Tem 2020

  • CVE-2020-13935
    56Planlayın

    The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.

    YüksekCVSS 7,5Kavram kanıtıEPSS %86

    apache · tomcat14 Tem 2020

  • CVE-2020-11546
    49Planlayın

    SuperWebMailer 7.21.0.01526 is susceptible to a remote code execution vulnerability in the Language parameter of mailingupgrade.php.

    KritikCVSS 9,8Kavram kanıtıEPSS %32

    superwebmailer · superwebmailer14 Tem 2020

  • CVE-2020-1040
    68Bu hafta

    A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authentica

    KritikCVSS 9,0KEVSilahlaştırılmışEPSS %7

    microsoft · windows server 200814 Tem 2020

  • CVE-2020-1147
    89Hemen

    A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %93

    microsoft · .net core14 Tem 2020

  • CVE-2020-1240
    39İzleyin

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka '

    YüksekCVSS 8,8İstismar yokEPSS %12

    microsoft · 365 apps14 Tem 2020

  • CVE-2020-1349
    38İzleyin

    A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka 'Microsof

    YüksekCVSS 7,8Kavram kanıtıEPSS %22

    microsoft · 365 apps14 Tem 2020

  • CVE-2020-1350
    99Hemen

    A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %96

    microsoft · windows server 200814 Tem 2020

  • CVE-2020-1400
    38İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %23

    microsoft · windows 1014 Tem 2020

  • CVE-2020-1401
    35İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %13

    microsoft · windows 1014 Tem 2020

  • CVE-2020-1403
    33İzleyin

    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execut

    YüksekCVSS 7,5İstismar yokEPSS %10

    microsoft · internet explorer14 Tem 2020

  • CVE-2020-1407
    34İzleyin

    A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En

    YüksekCVSS 7,8İstismar yokEPSS %10

    microsoft · windows 1014 Tem 2020

  • CVE-2020-1409
    35İzleyin

    A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V

    YüksekCVSS 7,8İstismar yokEPSS %11

    microsoft · windows 1014 Tem 2020

  • CVE-2020-1410
    34İzleyin

    A remote code execution vulnerability exists when Windows Address Book (WAB) improperly processes vcard files.To exploit the vulnerability,

    YüksekCVSS 7,8İstismar yokEPSS %11

    microsoft · windows 1014 Tem 2020

  • CVE-2020-1412
    39İzleyin

    A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics

    YüksekCVSS 8,8İstismar yokEPSS %13

    microsoft · windows 1014 Tem 2020

  • CVE-2020-1421
    57Planlayın

    A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An atta

    YüksekCVSS 8,8İstismar yokEPSS %74

    microsoft · windows 1014 Tem 2020

  • CVE-2020-1435
    39İzleyin

    A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka

    YüksekCVSS 8,8İstismar yokEPSS %13

    microsoft · windows 1014 Tem 2020

  • CVE-2020-1436
    41Planlayın

    A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems except

    YüksekCVSS 8,8İstismar yokEPSS %21

    microsoft · windows 1014 Tem 2020

  • CVE-2020-1439
    41Planlayın

    A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the source

    YüksekCVSS 8,8İstismar yokEPSS %20

    microsoft · sharepoint enterprise server14 Tem 2020

  • CVE-2020-1446
    38İzleyin

    A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W

    YüksekCVSS 8,8İstismar yokEPSS %11

    microsoft · 365 apps14 Tem 2020

  • CVE-2020-1447
    38İzleyin

    A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W

    YüksekCVSS 8,8İstismar yokEPSS %10

    microsoft · 365 apps14 Tem 2020

  • CVE-2020-1458
    34İzleyin

    A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic link library (DLL) file

    YüksekCVSS 7,8İstismar yokEPSS %10

    microsoft · 365 apps14 Tem 2020

  • CVE-2020-1481
    42Planlayın

    A remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when it validates source code after opening a pr

    YüksekCVSS 8,8İstismar yokEPSS %23

    microsoft · eslint14 Tem 2020

  • CVE-2020-9496
    60Bu hafta

    XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03

    OrtaCVSS 6,1SilahlaştırılmışEPSS %98

    apache · ofbiz15 Tem 2020

  • CVE-2020-14644
    97Hemen

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %94

    oracle · weblogic server15 Tem 2020

  • CVE-2020-14645
    53Planlayın

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

    KritikCVSS 9,8Kavram kanıtıEPSS %46

    oracle · weblogic server15 Tem 2020

  • CVE-2020-8958
    42Planlayın

    Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to

    YüksekCVSS 7,2Kavram kanıtıEPSS %45

    gpononu · 1ge router wifi onu v2801rw firmware15 Tem 2020

  • CVE-2020-3331
    52Planlayın

    Cisco RV110W and RV215W Series Routers Arbitrary Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %41

    cisco · rv110w wireless-n vpn firewall firmware16 Tem 2020

  • CVE-2020-3387
    39İzleyin

    Cisco SD-WAN vManage Software Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %13

    cisco · sd-wan firmware16 Tem 2020

  • CVE-2020-12011
    48Planlayın

    A specially crafted communication packet sent to the affected systems could cause a denial-of-service condition or allow remote code executi

    KritikCVSS 9,8İstismar yokEPSS %29

    mitsubishielectric · mc works16 Tem 2020

  • CVE-2020-13405
    34İzleyin

    userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    microweber · microweber16 Tem 2020

  • CVE-2020-11978
    95Hemen

    An issue was found in Apache Airflow versions 1.10.10 and below.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %99

    apache · airflow16 Tem 2020

  • CVE-2020-11981
    50Planlayın

    An issue was found in Apache Airflow versions 1.10.10 and below.

    KritikCVSS 9,8Kavram kanıtıEPSS %36

    apache · airflow16 Tem 2020

  • CVE-2020-15803
    34İzleyin

    Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1 allows stored XSS in the URL Wi

    OrtaCVSS 6,1İstismar yokEPSS %32

    zabbix · zabbix16 Tem 2020

  • CVE-2020-4464
    39İzleyin

    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code on a system with

    YüksekCVSS 8,8Kavram kanıtıEPSS %13

    ibm · websphere application server17 Tem 2020

  • CVE-2020-12029
    45Planlayın

    Rockwell Automation FactoryTalk View SE

    YüksekCVSS 7,8SilahlaştırılmışEPSS %46

    rockwellautomation · factorytalk view20 Tem 2020

  • CVE-2020-12027
    40Planlayın

    Rockwell Automation FactoryTalk View SE

    OrtaCVSS 4,3SilahlaştırılmışEPSS %53

    rockwellautomation · factorytalk view20 Tem 2020

  • CVE-2020-12028
    48Planlayın

    Rockwell Automation FactoryTalk View SE

    YüksekCVSS 8,1SilahlaştırılmışEPSS %53

    rockwellautomation · factorytalk view20 Tem 2020

  • CVE-2020-6507
    41Planlayın

    Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap corruption via a cra

    YüksekCVSS 8,8Kavram kanıtıEPSS %19

    google · chrome22 Tem 2020

  • CVE-2020-6519
    29İzleyin

    Policy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML p

    OrtaCVSS 6,5Kavram kanıtıEPSS %10

    google · chrome22 Tem 2020

  • CVE-2020-15893
    60Bu hafta

    An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02.

    KritikCVSS 9,8SilahlaştırılmışEPSS %20

    dlink · dir-816l firmware22 Tem 2020

  • CVE-2020-3452
    90Hemen

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %99

    cisco · adaptive security appliance software22 Tem 2020

  • CVE-2020-15901
    42Planlayın

    In Nagios XI before 5.7.3, ajaxhelper.php allows remote authenticated attackers to execute arbitrary commands via cmdsubsys.

    YüksekCVSS 8,8İstismar yokEPSS %21

    nagios · nagios xi22 Tem 2020

  • CVE-2020-15902
    35İzleyin

    Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option.

    OrtaCVSS 6,1İstismar yokEPSS %35

    nagios · nagios xi22 Tem 2020

  • CVE-2020-15492
    44Planlayın

    An issue was discovered in INNEO Startup TOOLS 2017 M021 12.0.66.3784 through 2018 M040 13.0.70.3804.

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    inneo · startup tools23 Tem 2020

  • CVE-2020-15920
    68Bu hafta

    There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with admini

    KritikCVSS 9,8SilahlaştırılmışEPSS %98

    midasolutions · eframework23 Tem 2020

  • CVE-2020-15921
    44Planlayın

    Mida eFramework through 2.9.0 has a back door that permits a change of the administrative password and access to restricted functionalities,

    KritikCVSS 9,8Kavram kanıtıEPSS %18

    midasolutions · eframework23 Tem 2020

  • CVE-2020-15922
    56Planlayın

    There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative

    KritikCVSS 9,8Kavram kanıtıEPSS %57

    midasolutions · eframework23 Tem 2020

  • CVE-2020-15778
    33İzleyin

    scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destinat

    YüksekCVSS 7,4Kavram kanıtıEPSS %13

    openbsd · openssh24 Tem 2020

  • CVE-2020-12812
    83Hemen

    An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %45

    fortinet · fortios24 Tem 2020

  • CVE-2020-1457
    35İzleyin

    A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Wind

    YüksekCVSS 7,8İstismar yokEPSS %12

    microsoft · windows 1027 Tem 2020

  • CVE-2020-10923
    60Bu hafta

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 r

    YüksekCVSS 8,8SilahlaştırılmışEPSS %84

    netgear · r6700 firmware28 Tem 2020

  • CVE-2020-10924
    61Bu hafta

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 r

    YüksekCVSS 8,8SilahlaştırılmışEPSS %87

    netgear · r6700 firmware28 Tem 2020

  • CVE-2020-15419
    48Planlayın

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.0.0.750_20200415.

    YüksekCVSS 7,5İstismar yokEPSS %59

    veeam · one firmware28 Tem 2020

  • CVE-2020-5377
    51Planlayın

    Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities.

    KritikCVSS 9,1Kavram kanıtıEPSS %48

    dell · emc openmanage server administrator28 Tem 2020

  • CVE-2020-4463
    41Planlayın

    IBM Maximo Asset Management 7.6.0.1 and 7.6.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data.

    YüksekCVSS 8,2Kavram kanıtıEPSS %31

    ibm · maximo asset management29 Tem 2020

  • CVE-2020-13699
    60Bu hafta

    TeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %25

    teamviewer · teamviewer29 Tem 2020

  • CVE-2020-15588
    43Planlayın

    An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.552.W.

    KritikCVSS 9,8İstismar yokEPSS %12

    zohocorp · manageengine desktop central29 Tem 2020

  • CVE-2020-8218
    68Bu hafta

    A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code e

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %32

    ivanti · connect secure30 Tem 2020

  • CVE-2020-16157
    25İzleyin

    A Stored XSS vulnerability exists in Nagios Log Server before 2.1.7 via the Notification Methods -> Email Users menu.

    OrtaCVSS 5,4İstismar yokEPSS %14

    nagios · log server30 Tem 2020