CVE-2020-27234 (openclinic_ga)
An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the serviceUID parameter. An attacker can make an […]
İçeriği inceleyinALLSAFE / Güncel Güvenlik Açıkları
Güvenlik Açıkları
NIST NVD, USOM / Siber Güvenlik Başkanlığı ve Exploit-DB kaynaklarından güvenlik bildirimleri. Etkilenen ürün ve sürümleri özgün kaynakta doğrulayın.
Kayıtlar kaynakların yayın tarihleri ve özgün içerikleriyle sunulur. Bir kaydın bulunması, kurumunuzun etkilendiğini tek başına göstermez. Sürüm ve yapılandırmayı kontrol ederek üreticinin güncel önerilerini değerlendirin.
CVE-2019-15059
In Liberty lisPBX 2.0-4, configuration backup files can be retrieved remotely from /backup/lispbx-CONF-YYYY-MM-DD.tar or /backup/lispbx-CDR-YYYY-MM-DD.tar without authentication or authorization. These configuration files […]
İçeriği inceleyinCVE-2020-15390
pyActivity in Pega Platform 8.4.0.237 has a security misconfiguration that leads to an improper access control vulnerability via =GetWebInfo. Devamını Oku
İçeriği inceleyinCVE-2020-4920 (collaborative_lifecycle_management, doors_next, engineering_insights, engineering_lifecycle_management, engineering_requirements_management_doors_next, engineering_test_management, engineering_workflow_management, rational_engineering_lifecycle_manager, rational_quality_manager, rational_team_concert, removable_media_management, rhapsody_model_manager)
IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the […]
İçeriği inceleyinCVE-2020-4964 (collaborative_lifecycle_management, doors_next, engineering_insights, engineering_lifecycle_management, engineering_requirements_management_doors_next, engineering_test_management, engineering_workflow_management, rational_engineering_lifecycle_manager, rational_quality_manager, rational_team_concert, removable_media_management, rhapsody_model_manager)
IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the […]
İçeriği inceleyinCVE-2020-4965 (collaborative_lifecycle_management, doors_next, engineering_insights, engineering_lifecycle_management, engineering_requirements_management_doors_next, engineering_test_management, engineering_workflow_management, rational_engineering_lifecycle_manager, rational_quality_manager, rational_team_concert, removable_media_management, rhapsody_model_manager)
IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM […]
İçeriği inceleyinCVE-2020-15734
An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate the browser's file upload capability into accessing other files […]
İçeriği inceleyinCVE-2020-7924
Usage of specific command line parameter in MongoDB Tools which was originally intended to just skip hostname checks, may result in MongoDB […]
İçeriği inceleyinCVE-2020-15942
An information disclosure vulnerability in Web Vulnerability Scan profile of Fortinet's FortiWeb version 6.2.x below 6.2.4 and version 6.3.x below 6.3.5 may […]
İçeriği inceleyinCVE-2019-17656
A Stack-based Buffer Overflow vulnerability in the HTTPD daemon of FortiOS 6.0.10 and below, 6.2.2 and below and FortiProxy 1.0.x, 1.1.x, 1.2.9 […]
İçeriği inceleyinCVE-2020-28872
An authorization bypass vulnerability in Monitorr v1.7.6m in Monitorr/assets/config/_installation/_register.php allows an unauthorized person to create valid credentials. Devamını Oku
İçeriği inceleyinCVE-2020-24285
INTELBRAS TELEFONE IP TIP200 version 60.61.75.22 allows an attacker to obtain sensitive information through /cgi-bin/cgiServer.exx. Devamını Oku
İçeriği inceleyin