| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-32657 | 4.0 | Nextcloud Server is a Nextcloud package that handles data storage. In versions of Nextcloud Server prior to 10.0.11, 20.0.10, and 21.0.2, a malicious user may be able to break the user administration page. This would disallow administrators to admini | 2022-10-26 15:20:00 | 2021-06-01 22:15:00 |
| CVE-2022-29475 | 8.1 | An information disclosure vulnerability exists in the XFINDER functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted man-in-the-middle attack can lead to increased privileges. An attacker can perform a ma | 2022-10-26 15:17:00 | 2022-10-25 17:15:00 |
| CVE-2020-21996 | 5.0 | AVE DOMINAplus <=1.10.x suffers from an unauthenticated reboot command execution. Attackers can exploit this issue to cause a denial of service scenario. | 2022-10-26 15:15:00 | 2021-04-28 15:15:00 |
| CVE-2020-21994 | 7.5 | AVE DOMINAplus <=1.10.x suffers from clear-text credentials disclosure vulnerability that allows an unauthenticated attacker to issue a request to an unprotected directory that hosts an XML file '/xml/authClients.xml' and obtain administrative login | 2022-10-26 15:15:00 | 2021-04-28 15:15:00 |
| CVE-2022-2152 | 4.8 | The Duplicate Page and Post WordPress plugin before 2.8 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. | 2022-10-26 15:09:00 | 2022-08-15 11:21:00 |
| CVE-2022-32245 | 8.2 | SAP BusinessObjects Business Intelligence Platform (Open Document) - versions 420, 430, allows an unauthenticated attacker to retrieve sensitive information plain text over the network. On successful exploitation, the attacker can view any data avail | 2022-10-26 15:08:00 | 2022-08-10 20:15:00 |
| CVE-2022-29477 | 9.8 | An authentication bypass vulnerability exists in the web interface /action/factory* functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP header can lead to authentication bypass. An attacker can se | 2022-10-26 15:06:00 | 2022-10-25 17:15:00 |
| CVE-2021-32655 | 3.5 | Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.11, 20.0.10, and 21.0.2, an attacker is able to convert a Files Drop link to a federated share. This causes an issue on the UI side of the sharing user. When | 2022-10-26 14:09:00 | 2021-06-01 21:15:00 |
| CVE-2021-32654 | 6.4 | Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.11, 20.0.10, and 21.0.2, an attacker is able to receive write/read privileges on any Federated File Share. Since public links can be added as federated file | 2022-10-26 14:09:00 | 2021-06-01 21:15:00 |
| CVE-2021-32653 | 4.0 | Nextcloud Server is a Nextcloud package that handles data storage. Nextcloud Server versions prior to 19.0.11, 20.0.10, or 21.0.2 send user IDs to the lookup server even if the user has no fields set to published. The vulnerability is patched in vers | 2022-10-26 14:09:00 | 2021-06-01 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: