| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2023-3486 | 7.5 | An authentication bypass exists in PaperCut NG versions 22.0.12 and prior that could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut NG host’s file storage. This could exhaust system resources and prevent the servic | 2023-07-31 18:01:00 | 2023-07-25 13:15:00 |
| CVE-2023-33925 | 6.1 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in PluginForage WooCommerce Product Categories Selection Widget plugin <= 2.0 versions. | 2023-07-31 18:01:00 | 2023-07-25 13:15:00 |
| CVE-2023-23833 | 5.4 | Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Steven Henty Drop Shadow Boxes plugin <= 1.7.10 versions. | 2023-07-31 18:01:00 | 2023-07-25 13:15:00 |
| CVE-2023-34017 | 6.1 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FiveStarPlugins Five Star Restaurant Reservations plugin <= 2.6.7 versions. | 2023-07-31 18:00:00 | 2023-07-25 14:15:00 |
| CVE-2023-34369 | 4.8 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GrandSlambert Login Configurator plugin <= 2.1 versions. | 2023-07-31 17:59:00 | 2023-07-25 14:15:00 |
| CVE-2023-38617 | 6.1 | Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the filter parameter at /api?path=files. | 2023-07-31 17:54:00 | 2023-07-20 19:15:00 |
| CVE-2023-37629 | 9.8 | Online Piggery Management System 1.0 is vulnerable to File Upload. An unauthenticated user can upload a php file by sending a POST request to "add-pig.php." | 2023-07-31 17:47:00 | 2023-07-12 17:15:00 |
| CVE-2023-36543 | 6.5 | Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use crafted input to make the current request hang. It is recommended to upgrade to a version that is not affected | 2023-07-31 17:47:00 | 2023-07-12 10:15:00 |
| CVE-2023-37917 | 8.8 | KubePi is an opensource kubernetes management panel. A normal user has permission to create/update users, they can become admin by editing the `isadmin` value in the request. As a result any user may take administrative control of KubePi. This issue | 2023-07-31 17:33:00 | 2023-07-21 21:15:00 |
| CVE-2023-37918 | 7.5 | Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge. A vulnerability has been found in Dapr that allows bypassing API token authentication, which is used by the Dapr sidecar to authenticate calls comi | 2023-07-31 17:30:00 | 2023-07-21 21:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39679
Zapisa po stranici: