| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-21957 | 6.8 | A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector 20.2.16900.0. A specially-crafted command injection can lead to elevated capabilities. An attacker can provide a malicious file to tri | 2022-10-24 16:34:00 | 2021-12-08 22:15:00 |
| CVE-2021-24914 | 6.0 | The Tawk.To Live Chat WordPress plugin before 0.6.0 does not have capability and CSRF checks in the tawkto_setwidget and tawkto_removewidget AJAX actions, available to any authenticated user. The first one allows low-privileged users (including simpl | 2022-10-24 16:33:00 | 2021-12-06 16:15:00 |
| CVE-2021-24842 | 5.5 | The Bulk Datetime Change WordPress plugin before 1.12 does not enforce capability checks which allows users with Contributor roles to 1) list private post titles of other users and 2) change the posted date of other users' posts. | 2022-10-24 16:33:00 | 2021-11-29 09:15:00 |
| CVE-2021-24703 | 3.5 | The Download Plugin WordPress plugin before 1.6.1 does not have capability and CSRF checks in the dpwap_plugin_activate AJAX action, allowing any authenticated users, such as subscribers, to activate plugins that are already installed. | 2022-10-24 16:32:00 | 2021-11-23 20:15:00 |
| CVE-2021-36322 | 5.8 | Dell Networking X-Series firmware versions prior to 3.0.1.8 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary host header values to poison the web-cache | 2022-10-24 16:25:00 | 2021-11-20 02:15:00 |
| CVE-2021-26338 | 7.8 | Improper access controls in System Management Unit (SMU) may allow for an attacker to override performance control tables located in DRAM resulting in a potential lack of system resources. | 2022-10-24 16:12:00 | 2021-11-16 18:15:00 |
| CVE-2022-23462 | 7.5 | IOWOW is a C utility library and persistent key/value storage engine. Versions 1.4.15 and prior contain a stack buffer overflow vulnerability that allows for Denial of Service (DOS) when it parses scientific notation numbers present in JSON. A patch | 2022-10-24 16:08:00 | 2022-10-21 22:15:00 |
| CVE-2021-41253 | 6.8 | Zydis is an x86/x86-64 disassembler library. Users of Zydis versions v3.2.0 and older that use the string functions provided in `zycore` in order to append untrusted user data to the formatter buffer within their custom formatter hooks can run into h | 2022-10-24 16:07:00 | 2021-11-08 22:15:00 |
| CVE-2021-41158 | 5.0 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.10.7, an attacker can perform a SIP digest leak | 2022-10-24 16:06:00 | 2021-10-26 14:15:00 |
| CVE-2021-24779 | 4.3 | The WP Debugging WordPress plugin before 2.11.0 has its update_settings() function hooked to admin_init and is missing any authorisation and CSRF checks, as a result, the settings can be updated by unauthenticated users. | 2022-10-24 16:05:00 | 2021-10-25 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: