| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-31559 | 5.0 | A crafted request bypasses S2S TCP Token authentication writing arbitrary events to an index in Splunk Enterprise Indexer 8.1 versions before 8.1.5 and 8.2 versions before 8.2.1. The vulnerability impacts Indexers configured to use TCPTokens. It does | 2022-10-25 16:42:00 | 2022-05-06 17:15:00 |
| CVE-2021-24978 | 5.0 | The OSMapper WordPress plugin through 2.1.5 contains an AJAX action to delete a plugin related post type named 'map' and is registered with the wp_ajax_nopriv prefix, making it available to unauthenticated users. There is no authorisation, CSRF and c | 2022-10-25 16:42:00 | 2022-03-28 18:15:00 |
| CVE-2020-36385 | 6.8 | An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after-free because the ctx is reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called, aka CID-f5449e74802c. | 2022-10-25 16:42:00 | 2021-06-07 12:15:00 |
| CVE-2021-25011 | 3.5 | The Maps Plugin using Google Maps for WordPress plugin before 1.8.1 does not have proper authorisation and CSRF in most of its AJAX actions, which could allow any authenticated users, such as subscriber to delete arbitrary posts and update the plugin | 2022-10-25 16:41:00 | 2022-02-28 09:15:00 |
| CVE-2021-24947 | 4.0 | The RVM WordPress plugin before 6.4.2 does not have proper authorisation, CSRF checks and validation of the rvm_upload_regions_file_path parameter in the rvm_import_regions AJAX action, allowing any authenticated user, such as subscriber, to read arb | 2022-10-25 16:41:00 | 2022-02-07 16:15:00 |
| CVE-2021-24968 | 3.5 | The Ultimate FAQ WordPress plugin before 2.1.2 does not have capability and CSRF checks in the ewd_ufaq_welcome_add_faq and ewd_ufaq_welcome_add_faq_page AJAX actions, available to any authenticated users. As a result, any users, with a role as low a | 2022-10-25 16:39:00 | 2022-01-24 08:15:00 |
| CVE-2021-22539 | 6.8 | An attacker can place a crafted JSON config file into the project folder pointing to a custom executable. VScode-bazel allows the workspace path to lint *.bzl files to be set via this config file. As such the attacker is able to execute any executabl | 2022-10-25 16:36:00 | 2021-04-16 11:15:00 |
| CVE-2021-22553 | 5.0 | Any git operation is passed through Jetty and a session is created. No expiry is set for the session and Jetty does not automatically dispose of the session. Over multiple git actions, this can lead to a heap memory exhaustion for Gerrit servers. We | 2022-10-25 16:35:00 | 2021-02-17 12:15:00 |
| CVE-2021-22116 | 4.3 | RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the tar | 2022-10-25 16:33:00 | 2021-06-08 12:15:00 |
| CVE-2021-22117 | 4.6 | RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with sufficient local filesystem permissions to add arbitrary plugins. | 2022-10-25 16:33:00 | 2021-05-18 13:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: