| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2023-25449 | 8.8 | Cross-Site Request Forgery (CSRF) vulnerability in Oliver Seidel, Bastian Germann cformsII plugin <= 15.0.4 versions. | 2023-06-22 16:54:00 | 2023-06-15 12:15:00 |
| CVE-2023-35030 | 8.8 | Cross-site request forgery (CSRF) vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.76, and Liferay DXP 7.4 update 70 through 76 allows remote attackers to execute arbitrary code in the scripting console | 2023-06-22 16:52:00 | 2023-06-15 05:15:00 |
| CVE-2023-35029 | 6.1 | Open redirect vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.76, and Liferay DXP 7.4 update 70 through 76 allows remote attackers to redirect users to arbitrary external URLs via the `_com_liferay_layo | 2023-06-22 16:51:00 | 2023-06-15 04:15:00 |
| CVE-2023-34452 | 6.1 | Grav is a flat-file content management system. In versions 1.7.42 and prior, the "/forgot_password" page has a self-reflected cross-site scripting vulnerability that can be exploited by injecting a script into the "email" parameter of the request. Wh | 2023-06-22 16:40:00 | 2023-06-14 23:15:00 |
| CVE-2023-34448 | 7.2 | Grav is a flat-file content management system. Prior to version 1.7.42, the patch for CVE-2022-2073, a server-side template injection vulnerability in Grav leveraging the default `filter()` function, did not block other built-in functions exposed by | 2023-06-22 16:31:00 | 2023-06-14 23:15:00 |
| CVE-2023-34626 | 4.3 | Piwigo 13.7.0 is vulnerable to SQL Injection via the "Users" function. | 2023-06-22 16:27:00 | 2023-06-15 16:15:00 |
| CVE-2023-27634 | 8.8 | Cross-Site Request Forgery (CSRF) vulnerability allows arbitrary file upload in Shingo Intrepidity plugin <= 1.5.1 versions. | 2023-06-22 16:20:00 | 2023-06-15 14:15:00 |
| CVE-2023-34105 | 7.5 | SRS is a real-time video server supporting RTMP, WebRTC, HLS, HTTP-FLV, SRT, MPEG-DASH, and GB28181. Prior to versions 5.0.157, 5.0-b1, and 6.0.48, SRS's `api-server` server is vulnerable to a drive-by command injection. An attacker may send a reques | 2023-06-22 16:06:00 | 2023-06-12 17:15:00 |
| CVE-2023-24895 | 7.8 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | 2023-06-22 15:58:00 | 2023-06-14 15:15:00 |
| CVE-2023-29289 | 6.5 | Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an XML Injection vulnerability. An attacker with low privileges can trigger a specially crafted script to a security feature bypass. Exploi | 2023-06-22 15:43:00 | 2023-06-15 19:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: