| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2023-44839 | 7.5 | D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Encryption parameter in the SetWLanRadioSecurity function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. | 2023-10-06 14:59:00 | 2023-10-05 16:15:00 |
| CVE-2022-0598 | 4.8 | The Login with phone number WordPress plugin before 1.3.8 does not sanitise and escape plugin settings which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. | 2023-10-06 14:17:00 | 2022-08-01 13:15:00 |
| CVE-2023-3768 | 7.5 | Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuzzing techniques that would allow him to gain knowledge about specially crafted packets that would create a DoS condition through t | 2023-10-06 14:02:00 | 2023-10-02 11:15:00 |
| CVE-2023-5312 | - | A vulnerability classified as critical has been found in DedeCMS 5.7.111. Affected is an unknown function of the file baidunews.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been dis | 2023-10-06 06:15:00 | 2023-10-06 06:15:00 |
| CVE-2020-6215 | 5.8 | SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, allows an attacker to redirect users to a malicious site due to insufficient URL validation and steal credentials of th | 2023-10-06 06:15:00 | 2020-04-14 20:15:00 |
| CVE-2019-19726 | 7.2 | OpenBSD through 6.6 allows local users to escalate to root because a check for LD_LIBRARY_PATH in setuid programs can be defeated by setting a very small RLIMIT_DATA resource limit. When executing chpass or passwd (which are setuid root), _dl_setup_e | 2023-10-06 06:15:00 | 2019-12-12 01:15:00 |
| CVE-2023-5375 | 6.1 | Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2. | 2023-10-05 18:26:00 | 2023-10-04 09:15:00 |
| CVE-2023-40559 | 8.8 | Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Dynamic Pricing and Discount Rules for WooCommerce plugin <= 2.4.0 versions. | 2023-10-05 18:23:00 | 2023-10-04 15:15:00 |
| CVE-2023-4090 | 6.1 | Cross-site Scripting (XSS) reflected vulnerability on WideStand until 5.3.5 version, which generates one of the meta tags directly using the content of the queried URL, which would allow an attacker to inject HTML/Javascript code into the response. | 2023-10-05 18:12:00 | 2023-10-04 12:15:00 |
| CVE-2023-4037 | 5.5 | Blind SQL injection vulnerability in the Conacwin 3.7.1.2 web interface, the exploitation of which could allow a local attacker to obtain sensitive data stored in the database by sending a specially crafted SQL query to the xml parameter. | 2023-10-05 18:12:00 | 2023-10-04 12:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: