| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-32717 | 5.0 | Shopware is an open source eCommerce platform. In versions prior to 6.4.1.1 private files publicly accessible with Cloud Storage providers when the hashed URL is known. Users are recommend to first change their configuration to set the correct visibi | 2022-10-25 14:39:00 | 2021-06-24 21:15:00 |
| CVE-2022-38117 | 6.1 | Juiker app hard-coded its AES key in the source code. A physical attacker, after getting the Android root privilege, can use the AES key to decrypt users’ ciphertext and tamper with it. | 2022-10-25 14:33:00 | 2022-10-24 14:15:00 |
| CVE-2021-32716 | 4.0 | Shopware is an open source eCommerce platform. In versions prior to 6.4.1.1 the admin api has exposed some internal hidden fields when an association has been loaded with a to many reference. Users are recommend to update to version 6.4.1.1. You can | 2022-10-25 14:21:00 | 2021-06-24 21:15:00 |
| CVE-2021-24948 | 5.0 | The Plus Addons for Elementor - Pro WordPress plugin before 5.0.7 does not validate the qvquery parameter of the tp_get_dl_post_info_ajax AJAX action, which could allow unauthenticated users to retrieve sensitive information, such as private and draf | 2022-10-25 13:58:00 | 2022-01-10 16:15:00 |
| CVE-2021-25003 | 7.5 | The WPCargo Track & Trace WordPress plugin before 6.9.0 contains a file which could allow unauthenticated attackers to write a PHP file anywhere on the web server, leading to RCE | 2022-10-25 13:48:00 | 2022-03-14 15:15:00 |
| CVE-2021-24993 | 4.0 | The Ultimate Product Catalog WordPress plugin before 5.0.26 does not have authorisation and CSRF checks in some AJAX actions, which could allow any authenticated users, such as subscriber to call them and add arbitrary products, or change the plugin' | 2022-10-25 13:47:00 | 2022-02-07 16:15:00 |
| CVE-2021-22682 | 4.6 | Cscape (All versions prior to 9.90 SP4) is configured by default to be installed for all users, which allows full permissions, including read/write access. This may allow unprivileged users to modify the binaries and configuration files and lead to l | 2022-10-25 13:28:00 | 2021-04-23 18:15:00 |
| CVE-2021-22815 | 5.0 | A CWE-200: Information Exposure vulnerability exists which could cause the troubleshooting archive to be accessed. Affected Products: 1-Phase Uninterruptible Power Supply (UPS) using NMC2 including Smart-UPS, Symmetra, and Galaxy 3500 with Network Ma | 2022-10-25 13:20:00 | 2022-01-28 20:15:00 |
| CVE-2021-22850 | 7.5 | HGiga EIP product lacks ineffective access control in certain pages that allow attackers to access database or perform privileged functions. | 2022-10-25 13:13:00 | 2021-01-19 10:15:00 |
| CVE-2021-21293 | 5.0 | blaze is a Scala library for building asynchronous pipelines, with a focus on network IO. All servers running blaze-core before version 0.14.15 are affected by a vulnerability in which unbounded connection acceptance leads to file handle exhaustion. | 2022-10-25 12:56:00 | 2021-02-02 22:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: