| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-36914 | 4.3 | Cross-Site Request Forgery (CSRF) vulnerability leading to Reflected Cross-Site Scripting (XSS) in CalderaWP License Manager (WordPress plugin) <= 1.2.11. | 2022-10-24 16:43:00 | 2022-04-12 17:15:00 |
| CVE-2021-27422 | 5.0 | GE UR firmware versions prior to version 8.1x web server interface is supported on UR over HTTP protocol. It allows sensitive information exposure without authentication. | 2022-10-24 16:43:00 | 2022-03-23 20:15:00 |
| CVE-2021-41239 | 5.0 | Nextcloud server is a self hosted system designed to provide cloud style services. In affected versions the User Status API did not consider the user enumeration settings by the administrator. This allowed a user to enumerate other users on the insta | 2022-10-24 16:42:00 | 2022-03-08 18:15:00 |
| CVE-2021-41181 | 2.1 | Nextcloud talk is a self hosting messaging service. In versions prior to 12.3.0 the Nextcloud Android Talk application did not properly detect the lockscreen state when a call was incoming. If an attacker got physical access to the locked phone, and | 2022-10-24 16:42:00 | 2022-03-08 18:15:00 |
| CVE-2007-5536 | 4.9 | Unspecified vulnerability in OpenSSL before A.00.09.07l on HP-UX B.11.11, B.11.23, and B.11.31 allows local users to cause a denial of service via unspecified vectors. | 2022-10-24 16:41:00 | 2007-10-18 00:17:00 |
| CVE-2021-24928 | 4.0 | The Rearrange Woocommerce Products WordPress plugin before 3.0.8 does not have proper access controls in the save_all_order AJAX action, nor validation and escaping when inserting user data in SQL statement, leading to an SQL injection, and allowing | 2022-10-24 16:40:00 | 2022-02-07 16:15:00 |
| CVE-2021-23195 | 5.0 | Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 has the option for automated indexing (directory listing) activated. When accessing a directory, a web server delivers its entire content in HTML form. If an index file does | 2022-10-24 16:39:00 | 2022-01-21 19:15:00 |
| CVE-2021-34402 | 4.6 | NVIDIA Tegra kernel driver contains a vulnerability in NVIDIA NVDEC, where a user with high privileges might be able to read from or write to a memory location that is outside the intended boundary of the buffer, which may lead to denial of service, | 2022-10-24 16:39:00 | 2022-01-18 18:15:00 |
| CVE-2021-24988 | 3.5 | The WP RSS Aggregator WordPress plugin before 4.19.3 does not sanitise and escape data before outputting it in the System Info admin dashboard, which could lead to a Stored XSS issue due to the wprss_dismiss_addon_notice AJAX action missing authorisa | 2022-10-24 16:38:00 | 2021-12-27 11:15:00 |
| CVE-2021-24790 | 4.0 | The Contact Form Advanced Database WordPress plugin through 1.0.8 does not have any authorisation as well as CSRF checks in its delete_cf7_data and export_cf7_data AJAX actions, available to any authenticated users, which could allow users with a rol | 2022-10-24 16:35:00 | 2021-12-13 11:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: