Rezultati pretraživanja za 'Od datuma: 15.12.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-12487 | 7.0 | Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make the ABE service execute some commands with root privilege. | 2024-12-17 03:15:06 | 2024-12-17 03:15:06 |
| CVE-2020-12484 | 6.4 | When using special mode to connect to enterprise wifi, certain options are not properly configured and attackers can pretend to be enterprise wifi through a carefully constructed wifi with the same name, which can lead to man-in-the-middle attacks. | 2024-12-17 03:15:05 | 2024-12-17 03:15:05 |
| CVE-2024-10205 | 9.4 | Authentication Bypass vulnerability in Hitachi Ops Center Analyzer on Linux, 64 bit (Hitachi Ops Center Analyzer detail view component), Hitachi Infrastructure Analytics Advisor on Linux, 64 bit (Hitachi Data Center Analytics component ).This issu | 2024-12-17 02:15:04 | 2024-12-17 02:15:04 |
| CVE-2024-11906 | 6.4 | The TPG Get Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tpg_get_posts' shortcode in all versions up to, and including, 3.6.5 due to insufficient input sanitization and output escaping on user supplied att | 2024-12-17 00:15:06 | 2024-12-17 00:15:06 |
| CVE-2024-11905 | 6.4 | The Animated Counters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'animatedcounte' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied | 2024-12-17 00:15:06 | 2024-12-17 00:15:06 |
| CVE-2024-11902 | 6.4 | The Slope Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slope-reservations' shortcode in all versions up to, and including, 4.2.11 due to insufficient input sanitization and output escaping on user suppli | 2024-12-17 00:15:05 | 2024-12-17 00:15:05 |
| CVE-2024-11900 | 6.4 | The Portfolio – Filterable Masonry Portfolio Gallery for Professionals plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'portfolio-pro' shortcode in all versions up to, and including, 1.2.2 due to insufficient input | 2024-12-17 00:15:04 | 2024-12-17 00:15:04 |
| CVE-2024-56017 | 7.1 | Cross-Site Request Forgery (CSRF) vulnerability in Tom Royal Stop Registration Spam allows Stored XSS.This issue affects Stop Registration Spam: from n/a through 1.23. | 2024-12-16 23:15:06 | 2024-12-16 23:15:06 |
| CVE-2024-12443 | 6.4 | The CRM Perks – WordPress HelpDesk Integration – Zendesk, Freshdesk, HelpScout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'crm-perks-tickets' shortcode in all versions up to, and including, 1.1.6 due to insuffi | 2024-12-16 23:15:06 | 2024-12-16 23:15:06 |
| CVE-2024-55951 | - | Metabase is an open-source data analytics platform. For new sandboxing configurations created in 1.52.0 till 1.52.2.4, sandboxed users are able to see field filter values from other sandboxed users. This is fixed in 1.52.2.5. Users on 1.52.0 or 1.52. | 2024-12-16 20:15:13 | 2024-12-16 20:15:13 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12893
Zapisa po stranici: