Rezultati pretraživanja za 'Od datuma: 15.12.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2024-41453 | 4.8 | A cross-site scripting (XSS) vulnerability in Process Maker pm4core-docker 4.1.21-RC7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter. | 2025-01-16 18:15:22 | 2025-01-15 23:15:09 |
| CVE-2023-4319 | - | Rejected reason: This CVE ID is a reservation duplicate of CVE-2023-4677. Notes: All CVE users should reference CVE-2023-4677 instead of this CVE ID. | 2025-01-16 17:15:11 | 2025-01-16 17:15:11 |
| CVE-2018-25108 | 7.5 | An unauthenticated remote attacker can cause a DoS in the controller due to uncontrolled resource consumption. | 2025-01-16 11:15:06 | 2025-01-16 11:15:06 |
| CVE-2024-13387 | 6.4 | The WP Responsive Tabs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wprtabs' shortcode in all versions up to, and including, 1.2.9 due to insufficient input sanitization and output escaping on user supplied attr | 2025-01-16 10:15:09 | 2025-01-16 10:15:09 |
| CVE-2024-13355 | 5.4 | The Admin and Customer Messages After Order for WooCommerce: OrderConvo plugin for WordPress is vulnerable to limited file uploads due to insufficient file type validation in the upload_file() function in all versions up to, and including, 13.2. This | 2025-01-16 10:15:08 | 2025-01-16 10:15:08 |
| CVE-2024-12427 | 5.3 | The Multi Step Form plugin for WordPress is vulnerable to unauthorized limited file upload due to a missing capability check on the fw_upload_file AJAX action in all versions up to, and including, 1.7.23. This makes it possible for unauthenticated at | 2025-01-16 10:15:07 | 2025-01-16 10:15:07 |
| CVE-2024-12226 | 6.5 | In affected versions of the Octopus Kubernetes worker or agent, sensitive variables could be written to the Kubernetes script pod log in clear-text. This was identified in Version 2 however it was determined that this could also be achieved in Versio | 2025-01-16 07:15:26 | 2025-01-16 07:15:26 |
| CVE-2025-0457 | 8.8 | The airPASS from NetVision Information has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbitrary OS commands. | 2025-01-16 02:15:27 | 2025-01-16 02:15:27 |
| CVE-2025-0456 | 9.8 | The airPASS from NetVision Information has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access the specific administrative functionality to retrieve * all accounts and passwords. | 2025-01-16 02:15:27 | 2025-01-16 02:15:27 |
| CVE-2025-0455 | 9.8 | The airPASS from NetVision Information has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents. | 2025-01-16 02:15:27 | 2025-01-16 02:15:27 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12467
Zapisa po stranici: