Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2023-0947 9.8 Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3. 2023-03-02 19:34:00
CVE-2021-32851 6.1 Mind-elixir is a free, open source mind map core. Prior to version 0.18.1, mind-elixir is prone to cross-site scripting when handling untrusted menus. This issue is patched in version 0.18.1 2023-03-02 19:21:00
CVE-2022-41566 5.4 The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute stored XSS on the affected system. Affected releases are TIBCO Software 2023-03-02 18:27:00
CVE-2022-41567 5.4 The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a cross-site scripting (XSS) attack on the affected syst 2023-03-02 18:26:00
CVE-2022-41565 5.4 The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a stored XSS 2023-03-02 18:25:00
CVE-2019-3418 3.5 All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting vulnerability (XSS). Due to incomplete input validation, an authorized user can exploit this vulnerability to execute malicious scripts. 2023-03-02 18:04:00
CVE-2018-17790 4.3 Prospecta Master Data Online (MDO) 2.0 has Stored XSS. 2023-03-02 18:03:00
CVE-2019-15081 3.5 OpenCart 3.x, when the attacker has login access to the admin panel, allows stored XSS within the Source/HTML editing feature of the Categories, Product, and Information pages. 2023-03-02 18:03:00
CVE-2019-14980 4.3 In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause a denial of service by sending a crafted file. 2023-03-02 18:00:00
CVE-2019-13418 5.0 Search Guard versions before 24.0 had an issue that values of string arrays in documents are not properly anonymized. 2023-03-02 17:59:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/39823
Zapisa po stranici: